I've seen something else that could be your problem... In your jboss-web.xml it appears no doctype element before the jboss-web tag, so maybe is using jboss-web.dtd, which is an old one and doesn't have the use-session-cookies... Try putting the right version for your JBoss version before doing the other things I've told you to try... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4040387#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...