i am trying to figure out how to apply the command ssg pass-through only for a specific subnet of the incoming traffic from a Serial interface (downlink).
Here is a URL that shows how to set it up. Basically you will need to create an access-list for the incoming traffic and specify it after the ssg pass-through command.