Somehow I fixed it. Not sure what I did, I made a change on the SRX to fix a different issue and it started working. But to fill in the questions.
2: If I put in the address for the ZD3025 from a device I could enter the Guest pass and be authenticated.
5: bypass it. no But in the past I have seen the SRX rules not take effect until a different change has been committed. Not very often, and usually only after a large configuration change.
It appears that the Guest login page takes about 3-4 seconds to load. I need to check our Steelheads and see if it is caching the page, if it is I will have to set the Steelheads to not cache from the ZD3025 address.