Citrix Traffic

[lewise () isotrak com]

Hi all,

Is anyone able to advise me in the potential security issues around un-encrypted ICA Traffic (TCP:1494/2598)...

If this traffic could be sniffed, what information could be gathered from this data? (if any).

Username?
Plain text password?
Keystrokes in plain text?

Please, anything you feel could be of value let me know. Names of any tools or papers on this topic e.t.c

Thanks.