Hi Vanessa,
Where did you set the timeout?
In web.config or IIS?
You need to set it in web.config.
<sessionState mode="InProc" cookieless="true" timeout="300" />
If you are using FormAthuntication then you need to set the timeout in web.config.
<system.web>
<authentication mode="Forms">
<forms timeout="300"/>
</authentication>
</system.web>
Also you have to set the app pool Idle Time-out (minutes) to 300 (5 hrs).
Open the IIS Management Console (INETMGR.MSC).
Selectthe Application Pools node. Select the application pool you want to change to run under an automatically generated application pool identity.
Right click the application pool and select Advanced Settings
Then set Idle Time-out (minutes).