1- create the vSRX VM ( with 3 interfaces) trusted, untrusted and Mgt 2- Service >> create service instance >> a- template >> b- instance: 3- Create Networking policy: attach: untrusted to trusted 4- Under networking networks>> aa policies in the subnetwork