This article describes probable cause of high cpu when L7 services such as AAMWD or Secintel are enabled from Junos space. 

In Junos space user can enable all services while configuring a sec policy. See below:

When Anti-malware or Secintel is enabled, we have to make sure that the device is already enrolled to ATP. (At the moment, jspace do not give any errors ) 

If not, since the config is present in policy, it use device memory and this causes the memory to be full.

This may results in packet drop through FW.