The SRX makes tunnel control better and easier
a nice blog article on tunneling control on the SRX with the Junos 12.3X48 Release.
You might miss this new feature, since it is called IPv6 tunneling control for SRX Series devices. It is useful in IPv6 enabled networks, but it is also essential for IPv4 only networks.
This feature adds the following new screens that allow you to control, allow, or block the transit of tunneled traffic:
More detail on these screens is available here.