How to configure ipsec tunnels for SSR with the Conductor and Mist
configuration assistance
For conductor managed SSR, you need to install the IPsec plug in. Please see the following documentation:
https://www.juniper.net/documentation/us/en/software/session-smart-router/docs/plugin_ipsec_client/index.html
In Mist, they call it Secure Edge Connectors:
For more information, see https://www.juniper.net/documentation/us/en/software/mist/mist-wan/topics/concept/wan-assurance-secure-edge-connector.html