If the Virtual directory of WCF services is not configured for anonymous access, then the "mex" endpoint in should be removed.