4.3.5.4 Ensure the Proper Session time out

Session timeout represents the event occurring when a user do not perform any action on a web site during an interval (defined in application). The event, on server side, changes the status of the user session to invalid (i.e. not used anymore) and instruct the Application/web server to destroy it (deleting all data contained into it). Application allows defining the session time out. The default value for session time out is 30 minutes.