The "disconnect and logoff" option is a control signal sent back to the desktop. This is sent over the framework channel along with USB traffic when using software clients, TCP 32111 by default, which you've probably missed off your firewall rules. If you're connecting remotely via a security server you need the secure tunnel enabled and this port allowed from the security server to the desktops. Please refer to the administration guide for more detail.
↧