Yes the policy enforcer will accept Secintel feed update request coming from reth4 or any revenue interfaces.

Explanation:

• When SRX is discovered with FXP IP, the device management management will happen from Space ---> SRX- fxp on port 22. 
• Whereas for the feed request, the Space will send below config to the SRX.
• The feed update will happen from SRX ----> Policy enforcer on port 443.
• Policy enforcer does not look for any source ip(fxp), it will only look if the SRX serial number is matching, if its matching then the feed will be updated.
• To reach the policy enforcer, the SRX can take any available route.

config:

set services security-intelligence url https://PE-IP:443/api/v1/manifest.xml