1.

Login to juniper_srx

2. Add new configs

configure private
set security zones security-zone INSIDE address-book address prod-vpn-pool-ABC
10.1.240.0/24
set security zones security-zone INSIDE address-book address prod-vpn-pool-xyz
10.1.172.0/24
set security zones security-zone INSIDE address-book address-set vpn-pool address
prod-vpn-pool-ABC
set security zones security-zone INSIDE address-book address-set vpn-pool address
prod-vpn-pool-xyz

set security policies from-zone INSIDE to-zone OUTSIDE policy allow-https-policy

match source-address vpn-pool
set security policies from-zone INSIDE to-zone OUTSIDE policy allow-https-policy
match destination-address system-ip
set security policies from-zone INSIDE to-zone OUTSIDE policy allow-https-policy
match application junos-https
set security policies from-zone INSIDE to-zone OUTSIDE policy allow-https-policy
then permit
set security policies from-zone INSIDE to-zone OUTSIDE policy allow-https-policy
then log session-init
set security policies from-zone INSIDE to-zone OUTSIDE policy allow-https-policy
then log session-close

insert security policies from-zone INSIDE to-zone OUTSIDE policy allow-https-

policy before policy default-deny

3. commit config

commit
show config | no-more