Server-Side State Management

Server-Side Option	Pros	Cons
Application State	Fast. Shared among all users.	State is stored once per server in multiple server configurations.
Cache Object (Application Scope)	Like the Application includes expiration via Depencies.	State is stored once per server in multiple server configurations.
Session State	Three choices in process, out of process, DB-backed. Can be configured as cookieless.	Can be abused. You pay a serialization cost when objects leave the process. In process requires Web server affinity. Cookies configuration makes it easier to hijack.
Database	State can be accessed by any server in a Web farm.	Pay a serialization and persistence cost when objects leave the process. Requires SQL Server license.