I have two juniper firewalls, an SSG-320M (screenos) and an SRX 340 (junos). I'm required to connect to a third party with an IPSEC VPN, however I'd like some additional protection from my firewall.
I'd like to apply an access list to an IPSEC tunnel. I've used a policy based and route based VPN. In each case I'm asked to specify the services but this appears to have no effect. I'm not sure if I need to bind a tunnel interface into a separate zone or if I should be using another feature altogether.