FortiGate Cloud SSO admin

[AEK]

Hi FGT admins

Today I saw 2 FortiGate physical appliances, with FortiOS 7.2.10, having a strange admin that I've never seen before on any other FGT.

On first FGT:

On other FGT:

What is this account user for? Or should this be removed?

[pbretas · Accepted solution]

Hello AEK 

This account is used by FortiCloud to push geolocation information to the FortiGate as described in the documentation below:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Log-showing-user-quot-FortiGateCloud...

The user can be deleted manually on the FortiGate side.

[AEK]

Hello Bretas

Thanks for the response.

I don't understand why Geolocalization info is pushed to FGT.

If I delete this account, will it impact anything?

[janderton47]

Hello @AEK 

Did you delete these accounts and, if so, was there any impact?

Thanks!

[AEK]

Hi Janderton

Since that time I could see the same user on many FortiGates of many organizations.

No I didn't delete it because the FortiGates were not mine,

edit: and I still don't know the impact.

Also as mentioned above by Bretas (Fortinet staff) this is legitimate account.

[janderton47]

Thanks for your swift response @AEK !