To have control on each users in Citrix environment, I believe you need a device which could read the IP
ORT and authenticated users mapping from the Citrix server itself and then push the same to enforcer. However, I don't think there is such device in case of Netscreen.
Current setup should allow further sessions from the same source IP once it's authenticated, though it's coming from different Citrix terminal.
Thanks,
Vikas