you can use a nonstandard port for ssh using the -p argument, and thus for vnc tunneled through ssh. But about Citrix: It is the defacto remote application in the corporate world. Many people have no choice. But I guess we have to wait for the next iteration of the tablet for usable Java performance.