Seems like it's okay internally now... some time and restart web-management seem to do the trick.
Also, is this true? "As an FYI for planning, the dynamic VPN feature for connecting to the SRX from the Pulse Secure client will be deprecated in an upcoming release. ". I read it on a forum somewhere. What's the alternative?