Christopher, I have changed in server.xml. Below is the server.xml part -
<Context path="" docBase="ROOT" sessionCookieName="mycookie" sessionCookieDomain="myapp.mydomain.com" sessionCookiePath="/" useHttpOnly="true" reloadable="false"> <WatchedResource>WEB-INF/web.xml</WatchedResource> <Manager pathname="" /> <!-- Disables session persistence --> </Context> As indicated above, I write JSESSIONID in "mycookie" cookie. Even after restart, the JSESSIONID is not getting invalidated. Before and after restart of apache, I can keep browsing the site with the same JSESSIONID in cookie.