Hello,
Two questions :
1/ what is the smallest MTU along the path? Can You please lower the TCP MSS on the SRX and re-test:
security { flow { tcp-mss { all-tcp { mss 1300; } }}}}
1300 is pretty much the safest value and it will get You through GRE-inside-IPSec if Your provider is using it
2/ have You tried with lastest Teminal Server/RDP 8.0 version that uses UDP/3389?
If yes do You see the same symptoms?
HTH
Thx
Alex