The Citrix NetScaler 9.3 version of the Citrix Application Firewall has undergone several significant changes. The most important is probably addition of the Signatures feature, which required changing the underlying security model.  I was going to blog about this, but Application Firewall product manager Marissa Schmidt beat me to it.  Here’s her blog: About the Hybrid Security Model.  Enjoy!