topic Re: ISE 3.1 - Configuration Changed: Admin=internal-feed-user; in Network Access Control

ISE 3.1 - Configuration Changed: Admin=internal-feed-user;

jvujcich — Sun, 18 Dec 2022 23:45:10 GMT

Hi all,

Several weeks ago, we upgraded from ISE 2.6 to 3.1p4.

Over the weekend (Sunday and Monday at approx. 1:10am) we got hundreds of emailed alerts like this:

Configuration Changed: Admin=internal-feed-user; Object Type=OUI; Object Name=00:01:C8

Description :

ISE configuration is updated

Severity :

Info

Suggested Actions :

Check if the configuration change is expected

*** This message is generated by Cisco Identity Services Engine (ISE) ***

Sent By Host : nzvaxxxxxx

What is this "internal-feed-user" (It's not a user that I know of) and what is it configuring?

Re: ISE 3.1 - Configuration Changed: Admin=internal-feed-user;

Greg Gibbs — Mon, 19 Dec 2022 00:12:29 GMT

That would be related to the Profiler Feed Service.

Re: ISE 3.1 - Configuration Changed: Admin=internal-feed-user;

jvujcich — Mon, 19 Dec 2022 00:48:59 GMT

Thanks Greg.

Re: ISE 3.1 - Configuration Changed: Admin=internal-feed-user;

kaihyu — Tue, 15 Jul 2025 02:16:06 GMT

this log is the notification , not the error .

and it means your ISE enable the Feed service automatically update.

Cisco ISE downloads policies and OUI database updates every day at 1:00 A.M of the local Cisco ISE server time zone. Cisco ISE automatically applies these downloaded feed server policies.

You can verify whether this feature is enabled by navigating to ISE Work Centers > Profiler > Feeds.
checkbox : Enable Online Subscription Update

Here you can check this internal user audi , Operations > Reports > Audit > Change configuration audit.