Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

IIS Session Timeout vs ASP.NET Session Timeout

In IIS 6 (and other versions too afaik), there is a Session Timeout setting in Properties -> Home Directory Tab -> Configuration button -> Options tab. Looks like this:

picture of IIS dialog

And in the ASP.NET web.config there is a SessionState setting, looks like this:

<system.web>     <sessionState timeout="120" />     <!-- etc .. --> </system.web> 

Are they, by any chance, related? Do they set the same thing, or different things?

like image 723
codeulike Avatar asked Oct 09 '09 15:10

codeulike


People also ask

What is the difference between session timeout and idle timeout?

Absolute session timeout is a recommended security feature, while idle session timeout is mainly a resource management feature. Absolute session timeout requires all Spotfire users to log in to the program again after the configured amount of time.

What is the default session timeout in IIS?

The default timeout setting for both User Session records in the Service Desk database and the web session in IIS is 20 minutes.

How long does ASP.NET session last?

A session ends if a user has not requested or refreshed a page in the application for a specified period. By default, this is 20 minutes.


2 Answers

They are not the same. The IIS session timeout is for clasic ASP pages. The web.config one is for asp.net.

like image 193
olle Avatar answered Oct 05 '22 15:10

olle


The IIS setting has no effect on ASP.NET sessions as far as I'm aware - these must be set in the web.config.

like image 43
Mark Bell Avatar answered Oct 05 '22 15:10

Mark Bell