This article explains an issue where SSH/PING stops working for the WAN interface of the SRX after adding junos-host allow rule for specific IPs.

SSH/PING for the WAN interface IP will stop working after adding the junos-host allow rule for specific IPs while denying the rest using the deny rule. This is applicable for the cases with dual ISP setup where RPM service is used for the route failover from primary ISP to secondary ISP. You will notice RPM probe failure for the WAN (internet) routes causing the primary ISP route to be cleared from the routing table.

This is an expected behaviour if the RPM probe target IP is not included in the junos-host allow rule. You need to add the RPM probe target IP in the source list of junos-host allow rule for the RPM probes to function seamlessly. This will make sure there is no unnecessary route failover which could impact the SSH/PING to the WAN interface of the SRX.