‘FGT_ha_admin’ is an Internal system user used for the following purposes:
- When syncing CLI changes from the master to the slave, this name is used as the log name for changes made on the slave, or is the account name for the user for synchronizing configuration when on HA.
- This is a Normal, behavior and is not to be taken as any attack: