apps/tomcat/conf/web.xml. Some webapps however have different timeouts configured, in particular webapps/assessment/WEB-INF/web.xml specifies a timeout of only 20 minutes for the assessment webapp. This is because the amount of session data in this webapp is particularly high, and expiring it faster allows memory to be freed up and re-used by the rest of the application, thus preventing heap memory shortages.
<session-config>
<session-timeout>60</session-timeout>
</session-config>
]]>
