I think the combination of a TS farm with TS Web Access and the TS Gateway in 2008 is a great option. You can add TSCAPs and TSRAPs to further refine who can connect and what they can connect to. It's definitely not as full featured as Citrix, but it's amazing what it can do out of the box.
YMMV Chris ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
