This screenshot shows the Access Manager's Policies page with settings for Protected_JSessionId_Policy.