JSP page is nothing but a Server side Script which gets converted to a Servlet class.. you get the HttpSession object on the page automatically (named as session) so you can use all the functionalities of HttpSesison to use.. so you can set the session time out dynamically even code it accordingly!! (e.g on occurance of some event, on fullfilment of some conditions, through admin Panel).
Comments
Does that solves your query..?
Chander