All, What is the best way to verify if a given JSESSIONID is valid/not, if it is going to be given to the app server through the web server (not through browser submission but through another means). Regular calls: Client's Browser -> Originating Web Server -> App Server New Way to verify JSESSIONID: Client's Browser -> Another Web Server -> Originating App Server -> If Verified -> Another App Server. I hope I put it in clear words. Thanks, -Syam ----- Learning web technologies... one at a time! :working: -- View this message in context: http://old.nabble.com/Verify-with-JSESSIONID-tp26605424p26605424.html Sent from the JBoss - Dev mailing list archive at Nabble.com.