The form of enterprise visitors has modified in methods legacy WAN architectures had been by no means designed to soak up. A single AI agent invocation not hits one server and returns one response; it triggers a multi-hop workflow that will span graphics processing unit (GPU) clusters in two public clouds, neo clouds, massive language fashions (LLMs), software-as-a-service (SaaS) platforms throughout regional suppliers, and on-premises information behind a department firewall.
Every cloud boundary compounds latency, every handbook configuration step widens the safety hole, and every backhauled movement taxes infrastructure sized for a special period. This shift calls for a basic rethinking of the WAN—not a sooner model of yesterday’s hub-and-spoke design, however a single platform that simplifies operations, embeds safety at each layer, and scales with AI from the department edge to each cloud.
At Cisco Stay 2026 Las Vegas, we’re finishing the refresh of the Cisco Safe Router portfolio and advancing our department and WAN structure alongside three priorities for the AI period: simplified operations powered by AgenticOps, safety fused into the community, and scalable gadgets prepared for AI.
Past AI help: An agentic department working mannequin
The department is the place a lot of the enterprise really operates—retail flooring, clinics, banks—and the place the end-customer expertise is made or misplaced. An offline point-of-sale system loses gross sales; a stalled medical workflow delays affected person diagnoses; a frozen teller terminal frustrates prospects.
The IT groups working these department networks are extra stretched than ever: workloads stay all over the place, workers join from anyplace. Community groups have responded with dashboards, scripts, and AI assistants—however these instruments on their very own aren’t sufficient. They want an working mannequin the place the community can sense, cause, and act on the identical pace because the workloads it carries, and that operators can belief to take action.
Cisco Unified Department addresses that complexity with a full-stack department structure throughout routing, switching, and Wi-Fi, now with superior software-defined WAN (SD-WAN) automation. Cisco Validated Designs codify deployment patterns for small, medium, and huge branches, with safety providers—Cisco XDR, safe entry service edge (SASE), Cisco Safe Entry, and 0 belief community entry (ZTNA)—embedded immediately into the validated design.
Unified Department consists of two automation toolkits—Department as Code for the DevOps group, and Cisco Workflows for the NetSecOps group. Department as Code brings Terraform and infrastructure as code (IaC) ideas to fleet-scale department deployments.
Cisco Workflows provides a low-code, drag-and-drop builder native to the Cisco Meraki Dashboard inside Cisco Cloud Management that automates duties throughout Cisco and third-party purposes, paired with the Cisco AI Assistant and AgenticOps for real-time execution. Both path collapses deployments and adjustments that used to take hours or days into minutes, and replaces brittle, ticket-driven work with deterministic, repeatable execution.
All of this lives in Cisco Cloud Management, the one cross-domain command middle, prolonged with AI Canvas for Cisco SD-WAN for visible, conversational troubleshooting and an AI Assistant in Cisco Catalyst SD-WAN Supervisor for proactive well being monitoring. Along with AgenticOps, these capabilities put the intelligence of an skilled community engineer into the arms of IT operators.
Cisco IOS XE routers are probably the most broadly deployed enterprise routers worldwide. Cisco is now bringing the operational simplicity of the Cisco Meraki Dashboard, delivered inside Cisco Cloud Management, to that put in base—zero-touch provisioning, Cisco Meraki Auto VPN, dashboard-driven monitoring, and an AI assistant for natural-language troubleshooting and configuration—with out giving up the ability of IOS XE.
The identical working mannequin additionally extends past the department. The brand new Cisco Multicloud Cloth makes it dramatically easier to attach any website—department, campus, or information middle—to any cloud, and cloud to cloud: a single consumption-based material overlay that replaces legacy hub-and-spoke designs and instance-based workarounds.
Safety fused into the community, with quantum on the horizon
Contemplate a retailer whose safety perimeter held, however whose credentials didn’t. An attacker enters a retailer’s back-office system with stolen credentials, strikes laterally into the company WAN, and accesses delicate buyer information earlier than anybody notices. The credentials had been legitimate. The connection was permitted. The injury was achieved in hours.
The WAN is the air visitors controller of the enterprise—sitting between each person, each website, and each cloud—and that function has to increase. It should direct legit visitors the place it must go with out slowing the enterprise down, and cease what just isn’t allowed from shifting freely, even when the credentials look approved. Wherever that visitors crosses the general public web, encryption is the distinction between transit and leakage.
Two architectural shifts matter. The primary is quantum resilience. Cryptographic protections that had been satisfactory 5 years in the past might not be adequate for the subsequent technology of threats, as advances in AI and quantum computing reshape how enterprises plan for long-term information safety. Adversaries are already working “harvest now, decrypt later” campaigns, capturing encrypted visitors immediately for decryption when quantum {hardware} arrives. Lengthy-lived information—mental property, healthcare data, regulated Personally Identifiable Info (PII)—is due to this fact in danger now.
The August 2026 launch of Cisco IOS XE brings three new defenses:
- Publish-quantum cryptography (PQC) prolonged throughout the Catalyst SD-WAN overlay for visitors in movement
- {Hardware}-accelerated PQC for data-center-scale flows
- PQC safe boot to guard platform integrity from power-on
Quantum resilience is now native to the platform, not retrofitted onto it, so enterprises can deploy protections designed for long-term {hardware} lifecycles.
The second is hybrid mesh firewalling. Cisco Safe Firewall on Safe Routers enhances the firewall already constructed into the Cisco 8000 Collection Safe Routers with the identical SnortML and Encrypted Visibility Engine (EVE) applied sciences that energy Cisco Safe Firewall: SnortML identifies and blocks superior and beforehand unseen threats inside the 8000 Collection Safe Routers, and EVE acts on threats inside encrypted visitors with out decryption. Each department, campus, and information middle edge turns into a constant enforcement level beneath one safety coverage. Inside Cisco Cloud Management, networking groups can outline that coverage as soon as and apply it throughout firewalls and Cisco Safe Routers, serving to unify safety operations (SecOps) and community operations (NetOps) throughout distributed websites.
Safe gadgets, prepared for AI: Cisco 8000 Collection Safe Router portfolio
Software program-defined operations solely ship if the underlying {hardware} can sustain with excessive throughput, deterministic latency, and the encrypted-traffic profile of AI workloads. Cisco is advancing the Cisco 8000 Collection Safe Router household to supply that substrate for the AI-era WAN:
- Cisco 8100 Collection Safe Routers: Enterprise connectivity for small branches, with 10G PON, built-in 5G failover, quantum resilience, and new Cisco MX OS and IOS XE variants supply 2x efficiency of earlier generations, twin 2.5 GbE WAN ports, Wi-Fi 6, and Cisco ThousandEyes monitoring.
- Cisco 8200 Collection Safe Routers: Versatile department platforms with quantum-safe safe boot and a brand new Cisco Unified Edge platform variant are able to internet hosting edge AI workloads immediately on the department.
- Cisco 8300 Collection Safe Router (MX OS): Enterprise-in-a-box for cloud-managed branches, with Cisco Firewalls on Safe Routers delivers 8–10 Gbps next-generation firewall (NGFW) throughput and 4 Gbps superior menace safety, plus unified cloud administration combining SD-WAN, SASE, and superior menace safety in a single equipment.
- Cisco 8600 Collection Safe Routers: Quantum-resilient information middle aggregation with 100 Gbps high-density throughput, hardware-accelerated PQC, and safe data-center-to-cloud interconnects are constructed for AI-scale visitors.
A platform recalibrated for AI visitors
The pressures on enterprise networking are converging: IT is being requested to do extra with much less, the menace floor is increasing sooner than perimeters can sustain, and AI is reshaping the place workloads stay and the way they transfer. Closing that hole won’t come from one other level instrument or one other bolted-on dashboard—it should come from a platform the place operations, safety, and {hardware} had been rethought collectively.
These bulletins at Cisco Stay ship that rethinking: not a return to monolithic home equipment, however a recalibration of the place intelligence, enforcement, and capability belong throughout each layer of the community.
