how to prevent direct access to jsf pages?

Id like to prevent direct access to  pages jsf, even the user is allowed to get the  page requested,
it's possible to allow only pages redirected or forwarded by the FacesServlet ?

with only JSF, we can put jsp pages under /WEB-INF/ directory, so it can not be  viewed by user.

JSF  can not  redirect page under /WEB-INF/ directory,  the directory wich user has no access...
with facelets it seems impossible.
there any solution?
thanks !