The form of enterprise site visitors has modified in methods legacy WAN architectures had been by no means designed to soak up. A single AI agent invocation not hits one server and returns one response; it triggers a multi-hop workflow which will span graphics processing unit (GPU) clusters in two public clouds, neo clouds, massive language fashions (LLMs), software-as-a-service (SaaS) platforms throughout regional suppliers, and on-premises knowledge behind a department firewall.
Every cloud boundary compounds latency, every guide configuration step widens the safety hole, and every backhauled circulation taxes infrastructure sized for a special period. This shift calls for a basic rethinking of the WAN—not a quicker model of yesterday’s hub-and-spoke design, however a single platform that simplifies operations, embeds safety at each layer, and scales with AI from the department edge to each cloud.
At Cisco Stay 2026 Las Vegas, we’re finishing the refresh of the Cisco Safe Router portfolio and advancing our department and WAN structure alongside three priorities for the AI period: simplified operations powered by AgenticOps, safety fused into the community, and scalable gadgets prepared for AI.
Past AI help: An agentic department working mannequin
The department is the place many of the enterprise really operates—retail flooring, clinics, banks—and the place the end-customer expertise is made or misplaced. An offline point-of-sale system loses gross sales; a stalled scientific workflow delays affected person diagnoses; a frozen teller terminal frustrates clients.
The IT groups working these department networks are extra stretched than ever: workloads dwell all over the place, staff join from wherever. Community groups have responded with dashboards, scripts, and AI assistants—however these instruments on their very own aren’t sufficient. They want an working mannequin the place the community can sense, cause, and act on the similar pace because the workloads it carries, and that operators can belief to take action.
Cisco Unified Department addresses that complexity with a full-stack department structure throughout routing, switching, and Wi-Fi, now with superior software-defined WAN (SD-WAN) automation. Cisco Validated Designs codify deployment patterns for small, medium, and huge branches, with safety providers—Cisco XDR, safe entry service edge (SASE), Cisco Safe Entry, and nil belief community entry (ZTNA)—embedded immediately into the validated design.
Unified Department consists of two automation toolkits—Department as Code for the DevOps crew, and Cisco Workflows for the NetSecOps crew. Department as Code brings Terraform and infrastructure as code (IaC) rules to fleet-scale department deployments.
Cisco Workflows provides a low-code, drag-and-drop builder native to the Cisco Meraki Dashboard inside Cisco Cloud Management that automates duties throughout Cisco and third-party functions, paired with the Cisco AI Assistant and AgenticOps for real-time execution. Both path collapses deployments and modifications that used to take hours or days into minutes, and replaces brittle, ticket-driven work with deterministic, repeatable execution.
All of this lives in Cisco Cloud Management, the one cross-domain command middle, prolonged with AI Canvas for Cisco SD-WAN for visible, conversational troubleshooting and an AI Assistant in Cisco Catalyst SD-WAN Supervisor for proactive well being monitoring. Along with AgenticOps, these capabilities put the intelligence of an professional community engineer into the arms of IT operators.
Cisco IOS XE routers are some of the extensively deployed enterprise routers worldwide. Cisco is now bringing the operational simplicity of the Cisco Meraki Dashboard, delivered inside Cisco Cloud Management, to that put in base—zero-touch provisioning, Cisco Meraki Auto VPN, dashboard-driven monitoring, and an AI assistant for natural-language troubleshooting and configuration—with out giving up the ability of IOS XE.
The identical working mannequin additionally extends past the department. The brand new Cisco Multicloud Cloth makes it dramatically easier to attach any website—department, campus, or knowledge middle—to any cloud, and cloud to cloud: a single consumption-based cloth overlay that replaces legacy hub-and-spoke designs and instance-based workarounds.
Safety fused into the community, with quantum on the horizon
Contemplate a retailer whose safety perimeter held, however whose credentials didn’t. An attacker enters a retailer’s back-office system with stolen credentials, strikes laterally into the company WAN, and accesses delicate buyer knowledge earlier than anybody notices. The credentials had been legitimate. The connection was permitted. The harm was accomplished in hours.
The WAN is the air site visitors controller of the enterprise—sitting between each consumer, each website, and each cloud—and that function has to develop. It should direct respectable site visitors the place it must go with out slowing the enterprise down, and cease what is just not allowed from transferring freely, even when the credentials look licensed. Wherever that site visitors crosses the general public web, encryption is the distinction between transit and leakage.
Two architectural shifts matter. The primary is quantum resilience. Cryptographic protections that had been sufficient 5 years in the past will not be enough for the subsequent era of threats, as advances in AI and quantum computing reshape how enterprises plan for long-term knowledge safety. Adversaries are already working “harvest now, decrypt later” campaigns, capturing encrypted site visitors right now for decryption when quantum {hardware} arrives. Lengthy-lived knowledge—mental property, healthcare data, regulated Personally Identifiable Info (PII)—is due to this fact in danger now.
The August 2026 launch of Cisco IOS XE brings three new defenses:
- Submit-quantum cryptography (PQC) prolonged throughout the Catalyst SD-WAN overlay for site visitors in movement
- {Hardware}-accelerated PQC for data-center-scale flows
- PQC safe boot to guard platform integrity from power-on
Quantum resilience is now native to the platform, not retrofitted onto it, so enterprises can deploy protections designed for long-term {hardware} lifecycles.
The second is hybrid mesh firewalling. Cisco Safe Firewall on Safe Routers enhances the firewall already constructed into the Cisco 8000 Sequence Safe Routers with the identical SnortML and Encrypted Visibility Engine (EVE) applied sciences that energy Cisco Safe Firewall: SnortML identifies and blocks superior and beforehand unseen threats inside the 8000 Sequence Safe Routers, and EVE acts on threats inside encrypted site visitors with out decryption. Each department, campus, and knowledge middle edge turns into a constant enforcement level below one safety coverage. Inside Cisco Cloud Management, networking groups can outline that coverage as soon as and apply it throughout firewalls and Cisco Safe Routers, serving to unify safety operations (SecOps) and community operations (NetOps) throughout distributed websites.
Safe gadgets, prepared for AI: Cisco 8000 Sequence Safe Router portfolio
Software program-defined operations solely ship if the underlying {hardware} can sustain with excessive throughput, deterministic latency, and the encrypted-traffic profile of AI workloads. Cisco is advancing the Cisco 8000 Sequence Safe Router household to offer that substrate for the AI-era WAN:
- Cisco 8100 Sequence Safe Routers: Enterprise connectivity for small branches, with 10G PON, built-in 5G failover, quantum resilience, and new Cisco MX OS and IOS XE variants provide 2x efficiency of earlier generations, twin 2.5 GbE WAN ports, Wi-Fi 6, and Cisco ThousandEyes monitoring.
- Cisco 8200 Sequence Safe Routers: Versatile department platforms with quantum-safe safe boot and a brand new Cisco Unified Edge platform variant are able to internet hosting edge AI workloads immediately on the department.
- Cisco 8300 Sequence Safe Router (MX OS): Enterprise-in-a-box for cloud-managed branches, with Cisco Firewalls on Safe Routers delivers 8–10 Gbps next-generation firewall (NGFW) throughput and 4 Gbps superior risk safety, plus unified cloud administration combining SD-WAN, SASE, and superior risk safety in a single equipment.
- Cisco 8600 Sequence Safe Routers: Quantum-resilient knowledge middle aggregation with 100 Gbps high-density throughput, hardware-accelerated PQC, and safe data-center-to-cloud interconnects are constructed for AI-scale site visitors.
A platform recalibrated for AI site visitors
The pressures on enterprise networking are converging: IT is being requested to do extra with much less, the risk floor is increasing quicker than perimeters can sustain, and AI is reshaping the place workloads dwell and the way they transfer. Closing that hole is not going to come from one other level device or one other bolted-on dashboard—it should come from a platform the place operations, safety, and {hardware} had been rethought collectively.
These bulletins at Cisco Stay ship that rethinking: not a return to monolithic home equipment, however a recalibration of the place intelligence, enforcement, and capability belong throughout each layer of the community.
