Hi, on SRX, as long as traffic comes into another interface in the same zone, you do not need to turn off TCP SYN checking like in ScreenOS. Junos on SRX tracks sessions per zone, not per interface, so you should be good to go without any modifications.