An open session is defined as a session that is either licensed or that can be resumed. This idle, can-be-resumed, state is different for browser and tunnel sessions:
Unlicensed sessions in this open state can be resumed as long as the authentication token remains valid and a license is available when the session is resumed. By default, the authentication token is valid several hours after a session is started.