idle timeout

for applications that do not require long-lived connections, idle timeout should be kept low. For other things, like telnet, ssh, rdp, etc, it makes sense to give users time to look away from their screen without killing their sessions (assuming app keepalives are not configured, if they are, and you control them, you can set the idle timeout to just a few seconds greater than the configured keepalive interval)