re: Session Management and IP address - experiences?

[eax () 3xt org]

Our web-application checked to make sure that the client's source IP
address didn't traverse a /24 (only the first three octets were checked).
A few months ago I found out we were kicking out ~7,000 people per day,
making them go back to the login screen, etc.   If you try and bind the
session to a single IP I'd imagine you'd have even more of a problem.

I had to abandon the IP address checking all together, and compensate
in other areas.