You must load the server certificates on the SRX Series device: In SSL proxy server protection, the SRX Series device acts as a proxy for SSL connections. To decrypt and inspect the SSL traffic passing through, the SRX Series device needs access to the server certificates. Loading the server certificates onto the SRX Series device allows it to establish SSL connections on behalf of the servers.
You must import the root CA on the servers: When SSL proxy is enabled on the SRX Series device, it acts as a man-in-the-middle (MITM) for SSL connections. To ensure that the SSL connections are trusted by the servers, the servers must have the root certificate authority (CA) imported into their trust store. This allows the servers to validate the SSL certificates presented by the SRX Series device during SSL handshakes.