I would think (without trying) it should be something like this
set interface tunnel.2 ip x.x.x.x/30
set interface tunnel.2 tunnel encap gre
set interface tunnel.2 tunnel local-if trust dst-ip 1.2.3.4
With 1.2.3.4 the tunnel on the cisco
abd then ofcourse a route to the destination with tunnel.2 as gateway.
I read somewhere in releasenotes the tunnel interface should be in the same zone as the endpoint interface, but can;t remember the details.