If you are using Citrix Web Interface alone, then yes. Web Interface only intercepts the initial connection request and then sets up the client with an available Presentation Server. If you want to lock down the connection to just the client and one server, you should pursue a reverse proxy solution such as Citrix Access Gateway. Or if you have a load balancer you might use it to terminate those client connections as well in a reverse proxy type setup.
