When it comes to security policy enforcement on the SRX, this is entirely handled on the .. There are, however, some limitations with IP prefix-based matches. If the traffic is terminated or generated on fxp0 of the control plane, this security .