I am confused about ASP or ASP.Net session life time (or life cycle) concepts. More specifically, my confusions are:
Don't forget the AppPool settings too...by default (IIS 6 anyway) it will recycle every 120 minutes. So it's possible that someone could lose their session in less than the set Session_Timeout value.