1) Firstly CQ does not use a JSESSIONID. Do you really required it & if yes what is your business case? Note The cookie is set, if the JSPs are missing a <@page session="false"> statement. You need to verify all components if they correctly disable J2EE sessions.2) The problem & unfortunately as ...