SRX forwarding received fragmented packets even though the egress MTU fits.
Configure IP Force Reassembly:
set security flow force-ip-reassembly