No hits for newly created policies from the SD cloud. The interesting traffic will get dropped as there is no security policy match.

After deploying policies from the SD cloud to allow the particular traffic from the SD cloud, it is still being dropped on SRX.

Traceoptions show that there is no security policy match found for the interesting traffic.

When adding policies from the SD cloud, "dynamic-application" and "url-category" must be added mandatorily. There is no option to skip this.

Hence, when adding the policies from SD could, make sure that "dynamic-application" or "url-category" are set to "none"

When any one of the parameters, "dynamic-application" or "url-category" is set to "any" it makes the policy a Layer-7 Unified Policy.

If any one of the parameters, "dynamic-application" or "url-category" is set to "none" it makes the policy a Layer-4 Unified Policy.

If both these parameters are not used, it makes the policy a "standard policy".

The Layer-4 Unified Policy is the same as the standard policy.

So the execution order will be as follows:

1) Standard Policy / Layer-4 Unified Policy.

2) Layer-7 Unified Policy.