When does the HTTPSession expires

Hi all,

When does the HTTPSession expires in EP6 SP2.

Is this configured under Systemadmin -> System config -> User adm. -> SAP logon Ticket?

Or can I do this in the portalapp.xml with the attibute

timeout

Is the HTTPSession killed if the memory gets low?

KR Ralph