location / {
    rewrite ^/index\.php$ - last;
    if (!-e $request_filename){
        rewrite ^(.*)$ /index.php?/$1 last;
    }
}

location ^~ /protected/ {
    deny all;
}