Sorry, the MX series is just a router and does not have the ability for stateful firewall.
You need the SRX series devices for this feature with vSRX being the virtual one.
------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home------------------------------