Hi, I need to protect some static html pages. For that i use the FORM based mechanism from tomcat but without these special formtags. For user login i use my own servlet, that does useridentification and starts a session. So, if the user is logged in and the session is startet. Is this session also valid for the protected static pages? Günter