I am wondering if the SRX can do this or does this for example if I am allowing port 80/443 to a server from the public is it check to make sure the incoming communication is doing a get http/https etc etc and if not dropping the communication? Like ISA can do, I'm having debates on securly publishing domain joined servers in the DMZ (I have RD Gateway/RD Web Access) and they both have to be domain members and I am allowing the needed traffic from the DMZ servers to the internal domain controllers and remote desktop session farm.
Any info would be great, I have been searching google but couldn't come up with anything. Thanks