>Dear All,
>I have set the timeout attribute in my web.config file to
>1. I also have set the Session_End event handler has:
>
> Sub Session_End(ByVal sender As Object, ByVal e As EventArgs)
> ' Fires when the session ends
> Response.Redirect("login.aspx")
> End Sub
>
>The timeout has occured but it does not automatically go to login.aspx ..I mean I have to refresh the page manually (by pressing F5 or go to View -> Refresh)
>
>how to deal with this.. please advise
>
>Regards
>Winanjaya

First, the sessions and the authentication ticket have seperate timeouts. Authentication times out based on the code you use in the login page to create the authentication ticket.

Second, you can't control the client from the server like that. The session can/will timeout without a response. You user could have turned of their PC, then 20 minutes later their session times out which is when Session_End will fire.

Form authentication will automatically redirect a user back to the login screen if their authentication has timed out the next time the make a request to the server (as you have observed).

BOb