On the J-series Services Router, the set security screen command can be applied to the zone that contains the WAN interface, but it has no effect when applied to the zone that contains the WX interface (the wx-zone).