JBoss by default has an application deployed on the root context "/" which I believe will be visible across all virtual hosts as it is not bound to any particular virtual host. That root application (look for ROOT.war in the deploy directory) doesn't really provide any critical functionality, just links to the jmx-console, the web-console and tomcat status etc. Your options are to remove the application -just delete the entire directory or to edit the web.xml to move it off the root context. Have always thought it rather inconvenient/awkward that the root context is already used in JBoss. It would be much better if both that root application and the jmx and web consoles were under an appropriate context like /jboss-admin. Having them under a single context not only gets them out of the way, it makes it simpler to restrict access at a network dispatcher or apache level. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4095500#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...