That servlet has too much responsibilities. It is tight coupled. Refactor the data access code into a separate class so that you can reuse it in both the servlet class and the JSF bean.
So, basically:
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
Long id = Long.valueOf(request.getParameter("id"));
List<Product> products = productDAO.list(id);
request.setAttribute("products", products);
request.getRequestDispatcher("products.jsp").forward(request, response);
}
And:
@ManagedProperty(value="#{param.id}")
private Long id;
private List<Product> products; // +getter
@PostConstruct
public void init() {
this.products = productDAO.list(id);
}
So that they can operate independently.