Citrix Security Policy applied from APM

I am currently working on a POC to replace our Netscalers with a BIG IP with APM enabled. While I have the basic functionality working and am able to launch a VDI session successfully, I am not able to find a way to enforce the polices form the Citrix Environment.

 

In the current production environment the Netscalers forward from 2 separate VIPs and apply security policies based on the vip that the traffic was received from. This seems to only work from the Netscalers and not from the BIG-IP

 

I have little to no experience with the Citrix side, but below seems to be the list of assignment options available to me:

 

 

None of them seem to be suitable in terms of matching the traffic from the BIG-IP.

 

Has anyone come across this before or have any ideas how I can get around this issue? Any ideas would be gratefully received.

 

Thanks

 

Paul