Since data in session state is stored in server memory, it is not recommended to use session state when working with a large amount of data. The session state variable remains in memory until you destroy it, so there are too many variables in the performance of the memory effect.
Session variables and cookies are synonymous. Therefore, if a user has determined that their browser does not accept any cookies, your session variables will not work for this particular web surfer!
An instance of each session variable is created when the user visits the page, and these variables are stored for 20 minutes AFTER the user leaves the page! (In fact, these variables are saved until they are timed out. This timeout length is set by the web server administrator. I saw sites where the variables will crash in just 3 minutes, while others that are saved for 10, and third, keep the default value of 20 minutes.) So, if you put any large objects in a session (for example, ADO record sets, connections, etc.), you need serious problems! As the number of visitors increases, your server will experience dramatic performance disruptions by placing large objects in a session!
source share