This article explains how to fix the issue if importing FW policy is failing when an SSL proxy profile is used

You will get the following error in the jobs:

Reason net.juniper.jmp.exception.JMPException: net.juniper.jnap.secmgt.commons.provider.exceptions.ConfigurationException: java.lang.RuntimeException: io.grpc.StatusRuntimeException: INVALID_ARGUMENT: failed to create at index: 0, operation: 'CREATE': validation failed for creation of resource type ssl_proxy_profile with UUID('2783f7c5-6479-451d-80e8-d08e4060c523') and name('ssl_prof'): length of (certificates) cannot be 0

SDC is not supporting SSL reverse proxy at the moment. 

In the meantime, we can move the SSL reverse proxy-referred policies under a group so that they are untouched, and the import would go through. For Example:

set groups ssl-reverse-proxy-group services ssl proxy profile ssl_prof server-certificate sd_local

set groups ssl-reverse-proxy-group security policies from-zone test1 to-zone test2 policy TEST then permit application-services ssl-proxy profile-name ssl_prof

set groups ssl-reverse-proxy-group security policies from-zone test1 to-zone test2 policy TEST match source-address any

set groups ssl-reverse-proxy-group security policies from-zone test1 to-zone test2 policy TEST match destination-address any

set groups ssl-reverse-proxy-group security policies from-zone test1 to-zone test2 policy TEST match application junos-https