SRX

The traffic selector was the problem. I neded to add two traddic selector rules, one for the 172.18.0.0/22 network aone one for the 10.243.263.0/24 network, both w a remote ip of 0.0.0.0/0 so the users could access both internal letworks and the internet.  Thank you!

One way I can think of is to use the traffic-selector configuration. Say you want the users to access 192.168.1.0/24 in your network, then you put this in the local source list. Then users can go to 8.8.8.8 or any other places (as long as not 192.168.1.0/24)  directly from their devices. You can have multiple traffic-selectors to cover more local resources.  Haven't tried it in the lab, though.  Check out  the user devices "route print" to see where the traffic goes.