Technical Tip: Error 'Can not create query, check_create_cmf_query, firewall, and ippool_grp' is Displayed on FortiGate Console

[vpalli]

Description	This article addresses an issue where FortiGate presents an error 'Can not create query, check_create_cmf_query, firewall' after the firmware upgrade to v7.4.3 or higher.
Scope	FortiGate.
Solution	Before upgrading to v7.4.3 or higher and during subsequent device reboots, FortiGate may print the following error on the console screen frequently with no impact on operations. Enabling PCI resources...Done. Zeroing IRQ settings...Done. Verifying PIRQ tables...Done. Boot up, boot device capacity: 28626MB. Press any key to display configuration menu... ............................. Reading boot image 6066239 bytes. Initializing firewall... System is starting... Can not create query, check_create_cmf_query, firewall, ippool_grp, pid=3847(cmdbsvr_iprope) Can not create query, check_create_cmf_query, firewall, ippool_grp, pid=3862(cmdbsvr_iprope) These errors occur on platforms with the Hardware-accelerated carrier-grade NAT feature, such as the FortiGate -1800F/1801F (without a hyperscale license) only during upgrades or reboots, when the configuration is reinstalled. This issue has been resolved in FortiOS versions. v7.4.8 (scheduled to be released in April; 2025). v7.6.1 (available to download from the Fortinet support portal). These timelines for firmware release are estimates and may be subject to change.