The session timeout tag provides a way to specify the timeout for HTTP sessions, overriding the default time specified in <jakarta>/conf/web.xml (30 minutes).
The value between the tags is specified in minutes.
Example, to set timeout to 2 hours:
<session-config>
<session-timeout>120</session-timeout>
</session-config>
Java Docs at Sun