This article describes the issue of the dynamic VPN/Junos Pulse client being unable to establish the IKE/IPsec connection, when the IKE local identity is configured as FQDN on the SRX device; which hides behind a NAT device.
Junos Pulse is unable connect to the dynamic VPN with SRX, which hides behind a NAT device, when it is configured with the IKE local identity as FQDN.
This feature is not yet supported as of Junos 12.1R47.