How does BitLocker help? It seems like it would just add overhead to your VMs... It also seems like PCoIP would be better then RDP. A firewall is going to do nothing unless it block out-bound traffic.