To see why the policies are not working we will need the source and destination ip addresses to evaluate the configuration.
If you could run trace options per this and post the file it would help too.
https://kb.juniper.net/InfoCenter/index?page=content&id=kb16110