Port forwarding for Warframe on Juniper SRX

warframe-srx.conf

csadmin@fw1# show | compare rollback 1
[edit security nat source rule-set work-to-inet-via-isp1]
       rule cod-wz { ... }
+      rule warframe {
+          match {
+              source-address-name unikitty;
+              application warframe-pc;
+          }
+          then {
+              source-nat {
+                  pool {
+                      OUTSIDE-IP-POOL;
+                  }
+              }
+          }
+      }
       rule work-to-inet-via-isp1-r { ... }
[edit security nat destination]
+     pool unikitty {
+         address 10.0.1.47/32;
+     }
[edit security nat destination rule-set dnat-in-isp1]
+      rule forward-warframe {
+          match {
+              destination-address 0.0.0.0/0;
+              application warframe-pc;
+          }
+          then {
+              destination-nat {
+                  pool {
+                      unikitty;
+                  }
+              }
+          }
+      }
[edit security policies from-zone untrust-isp1 to-zone work]
+     policy untrust-to-warframe {
+         match {
+             source-address any;
+             destination-address unikitty;
+             application warframe-pc;
+         }
+         then {
+             permit;
+         }
+     }
[edit applications]
+   application warframe-pc-tcp {
+       protocol tcp;
+       destination-port 6695-6699;
+   }
+   application warframe-pc-udp-4950 {
+       protocol udp;
+       destination-port 4950;
+   }
+   application warframe-pc-udp-4955 {
+       protocol udp;
+       destination-port 4955;
+   }
[edit applications]
+   application-set warframe-pc {
+       application warframe-pc-tcp;
+       application warframe-pc-udp-4950;
+       application warframe-pc-udp-4955;
+   }