I found a realy strange behaviour here which is different than tomcat. If the web browser send a valid cookie to JBOSS, it will be used event though I have jbossweb-tomcat55.sar/context.xml with: Context cookies="false" crossContext="true" Behaviour is as follows: 1) if browser does not send cookie, jboss will rewrite urls ( as expected ) 2) if browser send cookie, jboss will use it. ( wrong behaviour and not consistent with standalone tomcat ) Anyone knows something about this ? Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3982037#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...