4
The default value is 15 minutes (see /class/xoopssecurity.php, /include/commons.php and /kernel/sessions.php).
When there are problems with the custom sessions, I don't think firewalls are to be blamed, but it has all to do with the browser settings for handling cookies.