Detected duplicate HTTP-based FlexSessions

For the following Flex / ColdFusion fault string:

faultString = “Detected duplicate HTTP-based FlexSessions, generally due to the remote host disabling session cookies. Session cookies must be enabled to manage the client connection correctly.”
faultCode = “Server.Processing.DuplicateSessionDetected”
Make sure that session cookies are enabled on the server and that the flex2gateway URL is not rewritten or modified by [...]

Security sandbox violation / Send Failed

For Flex working with ColdFusion to fix an error like one of the following:
“Error #2048: Security sandbox violation”
OR
faultCode:Client.Error.MessageSend
faultString:’Send Failed’
faultDetail:’Channel.Security.Error error Error #2048: Security sandbox violation:
file:// …….. .swf cannot load data from http://localhost/flex2gateway
OR
Fault faultString=”Send failed”
faultCode=”Client.Error.MessageSend”
faultDetail=”Channel.Connect.Failed error NetConnection.Call.Failed: HTTP: Status 500: url: ‘http://…’”
Check your crossdomain.xml file.

Apache Mod_rewrite for a secure site and Flex gateway

Rewrite all non-secure URLs aside from flex gateways for ColdFusion to a secure https server.  Here’s a sample Apache configuration:
<VirtualHost *:80>
RewriteEngine On
#  Don’t inherit the mod_rewrite options - don’t mess up flex data.
#  Allow all for the document root, but then will redirect all
#  non-flex based data (flex2gateway, crossdomain.xml, etc) to
#  https server which will [...]

Crossdomain.xml file for ColdFusion

If you’re getting an error like “Security error accessing url” from Flex, try editing the crossdomain.xml file in ColdFusion.  For a non-production, global access quick test to see if this solves your problem try the following.
Adobe ColdFusion Cross-Domain File for Global Access
This cross domain file allows any connection to CFC’s.
crossdomain.xml
<?xml version=”1.0″ ?>
<!DOCTYPE cross-domain-policy SYSTEM “http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd”>
<cross-domain-policy>
<allow-access-from [...]