You can modify the web.xml file to perform the following tasks:
Manage Administration Console session timeout. See Managing Administration Console Session Timeout.
Configure the Logout Disconnect Interval. See Configuring the Logout Disconnect Interval.
Disable phishing. See Disabling Phishing
in the NetIQ Access Manager Appliance 4.5 Security Guide.