Problem

Connections made by the Connect to URL filter are not released until the policy finishes or aborts. For long-running policies, this can cause a buildup of CLOSE_WAIT connections that do not get drained until the end.

Resolution

In 7.5.3 SP3, we have added a jvm.xml parameter that will cause the Connect to URL filter to release the connections as soon as they're finished, rather than waiting until the policy finishes to clean up. To enable the new behavior, the following setting needs to be added to your gateway's configuration:

<VMArg name="-DConnectToUrlFilter.removePreviousConnections=true"/>

Please refer to KB #167287 for further details on where to apply this JVM setting. In 7.6.1 and higher, this option is removed and there is a checkbox in the Connect to URL filter called "Release previously opened connection" which enables the behavior.