$ 0 0 Does your SSG now have the gateway ip address behind NAT on the SRX? If so, is nat-t enabled for the vpn configurations? https://www.juniper.net/documentation/en_US/junos/topics/concept/ipsec-nat-traversal-understanding.html