I should clarify... 20 minutes (or whatever setting) AFTER the last request. A new request will restart the timer. There is Session_OnEnd in your global.asa also, but this has proven to be *very* unreliable.