The form of enterprise site visitors has modified in methods legacy WAN architectures had been by no means designed to soak up. A single AI agent invocation now not hits one server and returns one response; it triggers a multi-hop workflow which will span graphics processing unit (GPU) clusters in two public clouds, neo clouds, massive language fashions (LLMs), software-as-a-service (SaaS) platforms throughout regional suppliers, and on-premises information behind a department firewall.
Every cloud boundary compounds latency, every guide configuration step widens the safety hole, and every backhauled stream taxes infrastructure sized for a special period. This shift calls for a elementary rethinking of the WAN—not a quicker model of yesterday’s hub-and-spoke design, however a single platform that simplifies operations, embeds safety at each layer, and scales with AI from the department edge to each cloud.
At Cisco Dwell 2026 Las Vegas, we’re finishing the refresh of the Cisco Safe Router portfolio and advancing our department and WAN structure alongside three priorities for the AI period: simplified operations powered by AgenticOps, safety fused into the community, and scalable units prepared for AI.
Past AI help: An agentic department working mannequin
The department is the place many of the enterprise really operates—retail flooring, clinics, banks—and the place the end-customer expertise is made or misplaced. An offline point-of-sale system loses gross sales; a stalled scientific workflow delays affected person diagnoses; a frozen teller terminal frustrates prospects.
The IT groups working these department networks are extra stretched than ever: workloads reside in all places, staff join from anyplace. Community groups have responded with dashboards, scripts, and AI assistants—however these instruments on their very own aren’t sufficient. They want an working mannequin the place the community can sense, cause, and act on the identical velocity because the workloads it carries, and that operators can belief to take action.
Cisco Unified Department addresses that complexity with a full-stack department structure throughout routing, switching, and Wi-Fi, now with superior software-defined WAN (SD-WAN) automation. Cisco Validated Designs codify deployment patterns for small, medium, and huge branches, with safety providers—Cisco XDR, safe entry service edge (SASE), Cisco Safe Entry, and 0 belief community entry (ZTNA)—embedded straight into the validated design.
Unified Department consists of two automation toolkits—Department as Code for the DevOps staff, and Cisco Workflows for the NetSecOps staff. Department as Code brings Terraform and infrastructure as code (IaC) ideas to fleet-scale department deployments.
Cisco Workflows provides a low-code, drag-and-drop builder native to the Cisco Meraki Dashboard inside Cisco Cloud Management that automates duties throughout Cisco and third-party functions, paired with the Cisco AI Assistant and AgenticOps for real-time execution. Both path collapses deployments and modifications that used to take hours or days into minutes, and replaces brittle, ticket-driven work with deterministic, repeatable execution.
All of this lives in Cisco Cloud Management, the one cross-domain command heart, prolonged with AI Canvas for Cisco SD-WAN for visible, conversational troubleshooting and an AI Assistant in Cisco Catalyst SD-WAN Supervisor for proactive well being monitoring. Along with AgenticOps, these capabilities put the intelligence of an professional community engineer into the arms of IT operators.
Cisco IOS XE routers are one of the crucial extensively deployed enterprise routers worldwide. Cisco is now bringing the operational simplicity of the Cisco Meraki Dashboard, delivered inside Cisco Cloud Management, to that put in base—zero-touch provisioning, Cisco Meraki Auto VPN, dashboard-driven monitoring, and an AI assistant for natural-language troubleshooting and configuration—with out giving up the facility of IOS XE.
The identical working mannequin additionally extends past the department. The brand new Cisco Multicloud Cloth makes it dramatically easier to attach any website—department, campus, or information heart—to any cloud, and cloud to cloud: a single consumption-based material overlay that replaces legacy hub-and-spoke designs and instance-based workarounds.
Safety fused into the community, with quantum on the horizon
Take into account a retailer whose safety perimeter held, however whose credentials didn’t. An attacker enters a retailer’s back-office system with stolen credentials, strikes laterally into the company WAN, and accesses delicate buyer information earlier than anybody notices. The credentials had been legitimate. The connection was permitted. The injury was carried out in hours.
The WAN is the air site visitors controller of the enterprise—sitting between each consumer, each website, and each cloud—and that function has to broaden. It should direct respectable site visitors the place it must go with out slowing the enterprise down, and cease what just isn’t allowed from transferring freely, even when the credentials look licensed. Wherever that site visitors crosses the general public web, encryption is the distinction between transit and leakage.
Two architectural shifts matter. The primary is quantum resilience. Cryptographic protections that had been satisfactory 5 years in the past is probably not enough for the following technology of threats, as advances in AI and quantum computing reshape how enterprises plan for long-term information safety. Adversaries are already working “harvest now, decrypt later” campaigns, capturing encrypted site visitors immediately for decryption when quantum {hardware} arrives. Lengthy-lived information—mental property, healthcare data, regulated Personally Identifiable Data (PII)—is due to this fact in danger now.
The August 2026 launch of Cisco IOS XE brings three new defenses:
Publish-quantum cryptography (PQC) prolonged throughout the Catalyst SD-WAN overlay for site visitors in movement
{Hardware}-accelerated PQC for data-center-scale flows
PQC safe boot to guard platform integrity from power-on
Quantum resilience is now native to the platform, not retrofitted onto it, so enterprises can deploy protections designed for long-term {hardware} lifecycles.
The second is hybrid mesh firewalling. Cisco Safe Firewall on Safe Routers enhances the firewall already constructed into the Cisco 8000 Collection Safe Routers with the identical SnortML and Encrypted Visibility Engine (EVE) applied sciences that energy Cisco Safe Firewall: SnortML identifies and blocks superior and beforehand unseen threats inside the 8000 Collection Safe Routers, and EVE acts on threats inside encrypted site visitors with out decryption. Each department, campus, and information heart edge turns into a constant enforcement level below one safety coverage. Inside Cisco Cloud Management, networking groups can outline that coverage as soon as and apply it throughout firewalls and Cisco Safe Routers, serving to unify safety operations (SecOps) and community operations (NetOps) throughout distributed websites.
Safe units, prepared for AI: Cisco 8000 Collection Safe Router portfolio
Software program-defined operations solely ship if the underlying {hardware} can sustain with excessive throughput, deterministic latency, and the encrypted-traffic profile of AI workloads. Cisco is advancing the Cisco 8000 Collection Safe Router household to supply that substrate for the AI-era WAN:
Cisco 8100 Collection Safe Routers: Enterprise connectivity for small branches, with 10G PON, built-in 5G failover, quantum resilience, and new Cisco MX OS and IOS XE variants provide 2x efficiency of earlier generations, twin 2.5 GbE WAN ports, Wi-Fi 6, and Cisco ThousandEyes monitoring.
Cisco 8200 Collection Safe Routers: Versatile department platforms with quantum-safe safe boot and a brand new Cisco Unified Edge platform variant are able to internet hosting edge AI workloads straight on the department.
Cisco 8300 Collection Safe Router (MX OS): Enterprise-in-a-box for cloud-managed branches, with Cisco Firewalls on Safe Routers delivers 8–10 Gbps next-generation firewall (NGFW) throughput and 4 Gbps superior menace safety, plus unified cloud administration combining SD-WAN, SASE, and superior menace safety in a single equipment.
Cisco 8600 Collection Safe Routers: Quantum-resilient information heart aggregation with 100 Gbps high-density throughput, hardware-accelerated PQC, and safe data-center-to-cloud interconnects are constructed for AI-scale site visitors.
A platform recalibrated for AI site visitors
The pressures on enterprise networking are converging: IT is being requested to do extra with much less, the menace floor is increasing quicker than perimeters can sustain, and AI is reshaping the place workloads reside and the way they transfer. Closing that hole is not going to come from one other level software or one other bolted-on dashboard—it should come from a platform the place operations, safety, and {hardware} had been rethought collectively.
These bulletins at Cisco Dwell ship that rethinking: not a return to monolithic home equipment, however a recalibration of the place intelligence, enforcement, and capability belong throughout each layer of the community.
