vonskippy wrote:
Any GUI that resides ON the server is a security risk
That seems a bit overly broad. I don't use any GUI-based tools to manage any of my systems, but I see no reason that every GUI has to be riskier. Of course, I'm sure some GUIs have exposures, but no differently than some CLI tools or network protocols (if you run the CLI tool on an external system), so I don't think you can make a blanket statement. In either case you'll want to lock down access appropriately.
If the GUI is only accessible over SSL with a password, then it's not much different than ssh. Or, depending on what hosts the GUI tool, you could require client certificate authentication, which is equivalent to blocking passwords in ssh.
And of course, in either case you might filter traffic by IP address to lock it down to your specific management hosts.
-- David