I don't know exposure is the right answer, but the client could choose to
connect internal drives and ship data out. Printers can form back
connection, but I think this is all at the request of the client.
I am going to do a little testing with it to be sure... The question is has
anyone tried to "back connect" through the "client" network?
If you want absolute control put a Winframe in the middle. Users winframe
to your server, and then use a winframe client installed to winframe out.
Citrix Authorized Gold Dealer