Our WAN has a number of Citrix Metaframe servers. I have auditing set on mine to show when someone logs in and out. I noticed an admin from another site had logged in to my server from his. I wanted to see what he was up to and went to Citrix Server Administration. His session did not show up on the list. Later I saw the audit log show that he logged out.
How can you hide a session like that? Is there any way to either monitor or block hidden sessions like that?
