Ok, so many years ago we used NX at work because it was a nice protocol that let us run the GUI version of Nessus and a few other tools via Wine on our (then) c

Ok, so many years ago we used NX at work because it was a nice protocol that let us run the GUI version of Nessus and a few other tools via Wine on our (then) colo[1]. Anyway, we found that NX was as protectable as Citrix. Several months later we binned it and just VPN'd through the colo. I imagine that unless things have improved from a security standpoint, Canonical's images that they're using for this are going to get owned. With the exception of one customer with whom we've worked with continuously for 7 years, every single Citrix deployment we've ever looked at has been exploitable to some extent. [1] - Courtesy of the awesome http://goscomb.net http://goscomb.net - they're not cheap but damn they're good for UK connectivity.