I'm not a netscaler expert, but the session traffic seems to be all originating from the nsip network. I will set up a lab and try out PBR