Deployment Scenario for Juniper Secure Connect
Figure 1 shows the deployment scenario for Juniper Secure Connect. Ensure you adjust the configuration values to map to your environment.
For traffic to flow correctly, you can either include a route in the protected network for the IP address that you assign to the clients directs to the SRX Series devices or NAT all client traffic coming into the protected networks.
You must ensure that the SRX Series device uses either a signed certificate or a self-signed certificate instead of the default system-generated certificate. Before you start configuring Juniper Secure Connect, it is important that you read the instructions in Prerequisites for Deploying Juniper Secure Connect.