idle timeout setting is not work

For number 1, if you've logged out of the application, why wouldn't you expect to have to log back in?

 

For number 2, is your first request an HTTP GET for a login page? Does the login page load slowly, or is it after you've clicked log-in?

 

 

I'd recommend getting a tcpdump and if you have something like httpwatch or httpfox, hit the Virtual Server with it, and then hit the server directly with it and compare your results.