Pls help!

I do not uderstand attribute cookieless in sessionState tag in config

I set the cookieless to false and forbid cookies in IE, but web application still works. Where does it store session data now, if cookies are forbidden, but rewriting of URL is not allowed?

What is the better solution: cookieless true or false?
Thx.