Re: Replacing a SSG5 with SRX100H2 in branch office

Hello.

Based on current configuration, yes, it's required to add the detination prefixes to the VPN zone address book.

However, going forward, it's recommended to use 'global' address book, exclusively.

https://www.juniper.net/documentation/en_US/junos-space14.1/topics/concept/junos-space-security-design-global-address-book-overview.html

https://forums.juniper.net/t5/Automation/SRX-How-to-convert-zone-based-address-books-to-a-global-one/ta-p/284801

Hope this helps.

Sam