F5 Online (Active) /Online (Standby) Behavior Question

You should be able to find out what that one connection is doing from your backend app server.

And yes, it is normal to have connections open, depending on how the virtual server is configured.

Looks like you need to speak to the admin of those F5 devices, who should know how it all works.