How far does it let you go with citrix drive redirection? Ideally we want to be able to only allow approved devices, encrypt the ones that are approved and audit what is going on...
Nagios, its free and not hard to get working imo, assuming basic Linux skills and you are happy to tinker with text conf files.
Compuware Client Vantage Agentless and Active - its simply superb for this.