In general, the session policy is used to control sessions of the DualShield web consoles, such as the Admin Console (DAC), User Self-Service Console (DSC), etc. 

However, the session policy can also be used to control the following types of applications

• Third-Party SAML applications
• Outlook Anywhere
• Exchange ActiveSync

The policy can be found by navigating to "Administration | Policies", then scrolling down to the policy "session system policies";