In IIS 6 (and other versions too afaik), there is a Session Timeout setting in Properties -> Home Directory Tab -> Configuration button -> Options tab. Looks like this:
And in the ASP.NET web.config there is a SessionState setting, looks like this:
<system.web> <sessionState timeout="120" /> <!-- etc .. --> </system.web>
Are they, by any chance, related? Do they set the same thing, or different things?
Absolute session timeout is a recommended security feature, while idle session timeout is mainly a resource management feature. Absolute session timeout requires all Spotfire users to log in to the program again after the configured amount of time.
The default timeout setting for both User Session records in the Service Desk database and the web session in IIS is 20 minutes.
A session ends if a user has not requested or refreshed a page in the application for a specified period. By default, this is 20 minutes.
They are not the same. The IIS session timeout is for clasic ASP pages. The web.config one is for asp.net.
The IIS setting has no effect on ASP.NET sessions as far as I'm aware - these must be set in the web.config.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With