$CATALINA_BASE/conf/context.xml
:<Context>
<Valve className="org.apache.catalina.valves.RemoteHostValve"
allow="путь/к/директории/manager"/>
<Valve className="org.apache.catalina.valves.RemoteAddrValve"
deny="192\.168\.1\.\d+"/>
</Context>