Hi Team,
First thing to remember is that CIsco ASA crypto ACL does not support application ports. You can configure them however they will not be off any use.
So you can only configure the Crypto ACL using the IP addresses.
However once the Crypto ACLs match and the tunnel is up you can use VPN filters to restrict the traffic that you want to allow through the tunnel.
Hope this helps in clearing some doubt about the use of application ports in the interesting traffic ACLs on both the SRX and as well as the Cisco side.
Warm regards,
Guru Prasad