The form of enterprise site visitors has modified in methods legacy WAN architectures had been by no means designed to soak up. A single AI agent invocation not hits one server and returns one response; it triggers a multi-hop workflow which will span graphics processing unit (GPU) clusters in two public clouds, neo clouds, massive language fashions (LLMs), software-as-a-service (SaaS) platforms throughout regional suppliers, and on-premises knowledge behind a department firewall.
Every cloud boundary compounds latency, every handbook configuration step widens the safety hole, and every backhauled circulate taxes infrastructure sized for a distinct period. This shift calls for a basic rethinking of the WAN—not a sooner model of yesterday’s hub-and-spoke design, however a single platform that simplifies operations, embeds safety at each layer, and scales with AI from the department edge to each cloud.
At Cisco Reside 2026 Las Vegas, we’re finishing the refresh of the Cisco Safe Router portfolio and advancing our department and WAN structure alongside three priorities for the AI period: simplified operations powered by AgenticOps, safety fused into the community, and scalable gadgets prepared for AI.
Past AI help: An agentic department working mannequin
The department is the place a lot of the enterprise really operates—retail flooring, clinics, banks—and the place the end-customer expertise is made or misplaced. An offline point-of-sale system loses gross sales; a stalled scientific workflow delays affected person diagnoses; a frozen teller terminal frustrates prospects.
The IT groups operating these department networks are extra stretched than ever: workloads dwell in every single place, workers join from wherever. Community groups have responded with dashboards, scripts, and AI assistants—however these instruments on their very own aren’t sufficient. They want an working mannequin the place the community can sense, cause, and act on the identical pace because the workloads it carries, and that operators can belief to take action.
Cisco Unified Department addresses that complexity with a full-stack department structure throughout routing, switching, and Wi-Fi, now with superior software-defined WAN (SD-WAN) automation. Cisco Validated Designs codify deployment patterns for small, medium, and huge branches, with safety companies—Cisco XDR, safe entry service edge (SASE), Cisco Safe Entry, and nil belief community entry (ZTNA)—embedded immediately into the validated design.
Unified Department consists of two automation toolkits—Department as Code for the DevOps workforce, and Cisco Workflows for the NetSecOps workforce. Department as Code brings Terraform and infrastructure as code (IaC) rules to fleet-scale department deployments.
Cisco Workflows provides a low-code, drag-and-drop builder native to the Cisco Meraki Dashboard inside Cisco Cloud Management that automates duties throughout Cisco and third-party purposes, paired with the Cisco AI Assistant and AgenticOps for real-time execution. Both path collapses deployments and adjustments that used to take hours or days into minutes, and replaces brittle, ticket-driven work with deterministic, repeatable execution.
All of this lives in Cisco Cloud Management, the one cross-domain command heart, prolonged with AI Canvas for Cisco SD-WAN for visible, conversational troubleshooting and an AI Assistant in Cisco Catalyst SD-WAN Supervisor for proactive well being monitoring. Along with AgenticOps, these capabilities put the intelligence of an knowledgeable community engineer into the palms of IT operators.
Cisco IOS XE routers are one of the crucial broadly deployed enterprise routers worldwide. Cisco is now bringing the operational simplicity of the Cisco Meraki Dashboard, delivered inside Cisco Cloud Management, to that put in base—zero-touch provisioning, Cisco Meraki Auto VPN, dashboard-driven monitoring, and an AI assistant for natural-language troubleshooting and configuration—with out giving up the ability of IOS XE.
The identical working mannequin additionally extends past the department. The brand new Cisco Multicloud Cloth makes it dramatically less complicated to attach any web site—department, campus, or knowledge heart—to any cloud, and cloud to cloud: a single consumption-based material overlay that replaces legacy hub-and-spoke designs and instance-based workarounds.
Safety fused into the community, with quantum on the horizon
Contemplate a retailer whose safety perimeter held, however whose credentials didn’t. An attacker enters a retailer’s back-office system with stolen credentials, strikes laterally into the company WAN, and accesses delicate buyer knowledge earlier than anybody notices. The credentials had been legitimate. The connection was permitted. The harm was finished in hours.
The WAN is the air site visitors controller of the enterprise—sitting between each consumer, each web site, and each cloud—and that position has to broaden. It should direct respectable site visitors the place it must go with out slowing the enterprise down, and cease what shouldn’t be allowed from transferring freely, even when the credentials look approved. Wherever that site visitors crosses the general public web, encryption is the distinction between transit and leakage.
Two architectural shifts matter. The primary is quantum resilience. Cryptographic protections that had been satisfactory 5 years in the past will not be enough for the following era of threats, as advances in AI and quantum computing reshape how enterprises plan for long-term knowledge safety. Adversaries are already operating “harvest now, decrypt later” campaigns, capturing encrypted site visitors at present for decryption when quantum {hardware} arrives. Lengthy-lived knowledge—mental property, healthcare data, regulated Personally Identifiable Data (PII)—is subsequently in danger now.
The August 2026 launch of Cisco IOS XE brings three new defenses:
- Put up-quantum cryptography (PQC) prolonged throughout the Catalyst SD-WAN overlay for site visitors in movement
- {Hardware}-accelerated PQC for data-center-scale flows
- PQC safe boot to guard platform integrity from power-on
Quantum resilience is now native to the platform, not retrofitted onto it, so enterprises can deploy protections designed for long-term {hardware} lifecycles.
The second is hybrid mesh firewalling. Cisco Safe Firewall on Safe Routers enhances the firewall already constructed into the Cisco 8000 Collection Safe Routers with the identical SnortML and Encrypted Visibility Engine (EVE) applied sciences that energy Cisco Safe Firewall: SnortML identifies and blocks superior and beforehand unseen threats inside the 8000 Collection Safe Routers, and EVE acts on threats inside encrypted site visitors with out decryption. Each department, campus, and knowledge heart edge turns into a constant enforcement level underneath one safety coverage. Inside Cisco Cloud Management, networking groups can outline that coverage as soon as and apply it throughout firewalls and Cisco Safe Routers, serving to unify safety operations (SecOps) and community operations (NetOps) throughout distributed websites.
Safe gadgets, prepared for AI: Cisco 8000 Collection Safe Router portfolio
Software program-defined operations solely ship if the underlying {hardware} can sustain with excessive throughput, deterministic latency, and the encrypted-traffic profile of AI workloads. Cisco is advancing the Cisco 8000 Collection Safe Router household to supply that substrate for the AI-era WAN:
- Cisco 8100 Collection Safe Routers: Enterprise connectivity for small branches, with 10G PON, built-in 5G failover, quantum resilience, and new Cisco MX OS and IOS XE variants supply 2x efficiency of earlier generations, twin 2.5 GbE WAN ports, Wi-Fi 6, and Cisco ThousandEyes monitoring.
- Cisco 8200 Collection Safe Routers: Versatile department platforms with quantum-safe safe boot and a brand new Cisco Unified Edge platform variant are able to internet hosting edge AI workloads immediately on the department.
- Cisco 8300 Collection Safe Router (MX OS): Enterprise-in-a-box for cloud-managed branches, with Cisco Firewalls on Safe Routers delivers 8–10 Gbps next-generation firewall (NGFW) throughput and 4 Gbps superior risk safety, plus unified cloud administration combining SD-WAN, SASE, and superior risk safety in a single equipment.
- Cisco 8600 Collection Safe Routers: Quantum-resilient knowledge heart aggregation with 100 Gbps high-density throughput, hardware-accelerated PQC, and safe data-center-to-cloud interconnects are constructed for AI-scale site visitors.
A platform recalibrated for AI site visitors
The pressures on enterprise networking are converging: IT is being requested to do extra with much less, the risk floor is increasing sooner than perimeters can sustain, and AI is reshaping the place workloads dwell and the way they transfer. Closing that hole is not going to come from one other level instrument or one other bolted-on dashboard—it’s going to come from a platform the place operations, safety, and {hardware} had been rethought collectively.
These bulletins at Cisco Reside ship that rethinking: not a return to monolithic home equipment, however a recalibration of the place intelligence, enforcement, and capability belong throughout each layer of the community.
