Is this possible to update session-setting in profile using metadata deployment i.e through package.xml.
Should be. I use a deployment tool which simplifies this for me, but if you're looking to pull it you might want to check workbench --> Info --> Metadata Types & Components --> ProfileSessionSetting.
What's highlighted in blue is just the profile name.
This'll give you the name to include in your package.xml to pull/deploy.