The device could fail to update due to the following errors:

[Error] Configuration update failed.

Error #1:

Severity : error
At : [edit security policies]
Message : statement not found: from-zone ZoneA to-zone ZoneB

Error #2:
Severity : error
At : [edit security address-book global] 
Message : statement not found: Address_name

Error #1:

Device update fails with error message:

[Error] Configuration update failed.

Severity : error
At : [edit security policies]
Message : statement not found: from-zone ZoneA to-zone ZoneB

The configuration preview contains 2 deleted lines for the zone combination.

##Security Firewall Policy : ZoneA - ZoneB##

delete security policies from-zone ZoneA to-zone ZoneB policy PolicyName


##Security Firewall Policy : ZoneA - ZoneB##

delete security policies from-zone ZoneA to-zone ZoneB

Error #2:

The configuration preview contains entries like the one below, however, for this problem to match the line below doesn't have to exist in the device CLI already:
delete security address-book global address address_name X.X.X.X/X

Error #1:

This is a known issue resolved in a later release: PR 1783380

Upgrade to Security Director 23.1 hotpatch-v4 or later for the permanent fix.

Workaround:

Execute the listed delete commands directly on the device CLI for the impacted zones, then update again from the Security Director app.

Error #2:  

Workaround:

Follow the steps to resync with the network on the necessary devices, then publish and update. It could be possible that some of the devices still fail after that. Find the devices and compare the config, then retry the resync with the network, then Publish Policies and update Policies on Devices.