I just assumed that doing it via Citrix would be better, as it's not downloading any data to the remote site. We use Citrix in the UK and it works OK.

I hadn't even considered setting up a VPN that enabled them to access the data directly because I just thought it'd take a lot more bandwidth, am I wrong?