3.8 ASP Session Object Timeout (AspSessionTimeout) - 'Virtual Dir Setting - AspSessionTimeout <= 10'
Information
Setting the AspSessionTimeout property will prevent session objects from using extraneously consuming memory resources as well as minimizing session replay attacks.
Solution
Make sure 'ASP Session Object Timeout (AspSessionTimeout)' is set from a minimum of 1 minute to a maximum of 10 minutes.