ASP.NET doesn't know if visitor is closed web browser or just working on something else while page is still opened. To keep session live we can use meta refresh or JavaScript on client side. That is not always acceptable solution, especially in cases where security is top priority. This tutorial explains how to detect if session is expired and if is, redirect visitor to Session-Expired.aspx page.