Add to the monitoring console the ability to identify those connections that are fully functional but that are receiving only keep-alive messages for a while (configurable).

Then admin can decide whether leave it untouched or forcefully close them.