Steve Maine has a great sessionstate preformance tip. On a related note, don't overload the constructors for aspx pages (the class in the code behind file), this resulted in a hard to diagnose httpexception, when using SessionState.