I am occur the same error in route based SSG550 (hub) and SRX100H2 (spokes) vpn configuration.
when I use in SRX100 the following commands
set security policies from-zone internet to-zone internet policy intra-untrust match source-address any
set security policies from-zone internet to-zone internet policy intra-untrust match destination-address any
set security policies from-zone internet to-zone internet policy intra-untrust match application any
set security policies from-zone internet to-zone internet policy intra-untrust then permit
I found the error as
[edit security policies from-zone internet to-zone]
'internet'
Security zone must be defined
[edit security policies from-zone internet to-zone internet to-zone]
'to-zone internet'
Security zone must be defined
error: commit failed: (statements constraint check failed)
How to fix it?