In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible

[Aoosthuizen]

Hi Guys

I have created a new parant Device group that contains shared rules for sub device groups under it. The rulease are zone specific and this is where the problem comes in, I get the error below when commiting to specific device.

 Last Push State Details
Details:
. In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible in security rule sec_afr_permit_panorama_out
. In VSYS vsys1 from zone MPLS of type unknown and to zone inside of type layer3 are incompatible in security rule sec_afr_permit_panorama_in
. In VSYS vsys1 from zone mpls-outside of type vwire and to zone inside of type layer3 are incompatible in security rule sec_afr_permit_panorama_in
. Configuration is invalid
Warnings:

How do I resolve this as I am not sure if the problem is in the Parent device group or the actual device template.

[rmfalconer]

Each zone referenced in a security rule must be of the same type. You can't have a source zone of vwire and a destination of L3.