How to configure ipsec tunnels for SSR with the Conductor and Mist
configuration assistance
For conductor managed SSR, (Does not apply to MIST) you need to install the IPsec plug in. Please see the following documentation:
https://www.juniper.net/documentation/us/en/software/session-smart-router/docs/plugin_ipsec_client/index.html
In Mist, they call it Secure Edge Connectors:
For more information, see https://www.juniper.net/documentation/us/en/software/mist/mist-wan/topics/concept/wan-assurance-secure-edge-connector.html