![\"Retail](\"https:\/\/dmsretail.com\/RetailNews\/wp-content\/uploads\/2022\/05\/RETAIL-ONLINE-TRAINING-728-X-90.png\")
<\/a><\/p>\n<\/p>\n
When\u00a0Cisco IT upgraded to Wi-Fi 7, faster connectivity was the expected headline. What surprised us was this: the security gains outpaced the networking gains.\u00a0Here\u2019s\u00a0what happened \u2014 and what it means for every organization still treating security as an add-on.<\/span><\/i>\u00a0<\/span><\/p>\n At my core, I believe that networking and security should not and cannot be\u00a0separated.\u00a0If one is an afterthought, the other will\u00a0suffer.\u00a0<\/span>Most enterprise networks were built for connectivity first. Security came later \u2014 layered on top, patched in, bolted together. For years, that was an acceptable trade-off.<\/span>\u00a0<\/span><\/p>\n It\u00a0isn\u2019t\u00a0anymore.<\/span>\u00a0<\/span><\/p>\n The world of IT is becoming unprecedented;\u00a0<\/span>AI threats are accelerating.\u00a0identities\u00a0are multiplying across users, devices, and AI agents<\/span>, and quantum threats\u00a0are\u00a0on the horizon.\u00a0<\/span>\u00a0The old model \u2014 network first, security second \u2014 was never designed to survive\u00a0what\u2019s\u00a0coming. Organizations still\u00a0operating\u00a0that way are leaving a structural gap that attackers are already learning to exploit.\u00a0<\/span>\u00a0<\/span><\/p>\n At Cisco IT,\u00a0we\u2019ve\u00a0held a different belief for years:\u00a0<\/span>networking and security cannot be separated.<\/span><\/b>\u00a0If one is treated as an afterthought, the other will suffer. The IT industry\u00a0agrees\u00a0and\u00a0we\u2019re\u00a0seeing\u00a0shifts\u00a0\u2014\u00a083% of network engineers now have security as part of their remit\u00a0<\/span>(ZK Research, 2025)<\/span><\/i>. But\u00a0believing\u00a0it and building it are two different things.<\/span>\u00a0<\/span><\/p>\n When we upgraded to Wi-Fi 7, we found out what it\u00a0looks\u00a0like to build them together \u2014 and what that difference means in practice.<\/span>\u00a0<\/span><\/p>\n Going into the Wi-Fi 7 upgrade, we had clear expectations: better data throughput, improved availability, stronger\u00a0performance at scale. Those gains arrived. But what we\u00a0didn\u2019t\u00a0fully\u00a0anticipate\u00a0was the degree to which Wi-Fi 7 would accelerate our security posture \u2014 not as a side effect, but as a core outcome.<\/span>\u00a0<\/span><\/p>\n The security gains\u00a0didn\u2019t\u00a0just keep pace with the networking gains. They outran them.<\/span>\u00a0<\/span><\/p>\n That was the moment it became clear: Wi-Fi 7 wasn\u2019t just a network upgrade. It was an opportunity to operationalize the Cisco Secure Networking approach \u2014 built on the principle that security and networking should be inherently and architecturally connected, not bolted together after the fact.<\/span>\u00a0<\/span><\/p>\n Here\u2019s what that looks like in practice:<\/span><\/b><\/p>\n Zero\u00a0trust\u00a0has\u00a0been an enterprise priority for years. Organizations have built sophisticated verification systems to ensure only trusted devices and users gain access. But there was always\u00a0a\u00a0vulnerability\u00a0hiding in plain sight:\u00a0<\/span>if the wireless association itself could be spoofed, intercepted, or manipulated, the entire\u00a0zero\u00a0trust\u00a0foundation was compromised.<\/span><\/b>\u00a0<\/p>\n Wi-Fi 7 and Cisco Identity Services Engine (ISE)\u00a0close\u00a0that gap. We use ISE to verify every endpoint using Wi-Fi Protected Access 3 (WPA3) \u2014 cryptographically hardening authentication at the network\u00a0layer\u00a0so connections cannot be spoofed or manipulated before access is granted.\u00a0<\/p>\n Once connected, ISE\u00a0integrates with\u00a0Duo\u2018s multi-factor authentication (MFA) and Cisco Secure Access to enable\u00a0passwordless\u00a0authentication across the business. The result: less login friction for users, real-time risk-aware policy enforcement for IT, and an authentication foundation that holds under pressure.\u00a0<\/p>\n Zero trust doesn\u2019t start at the application layer. It starts at the wireless association. Now ours does too.<\/p>\n<\/li>\n Now that the\u00a0foundations\u00a0were in place,\u00a0we\u00a0needed to\u00a0secure the\u00a0infrastructure itself.\u00a0<\/p>\n Traditionally, network infrastructure was treated as passive. Switches switched. Routers routed. Access points emitted signal. Security lived somewhere else, managed by a separate team, enforced by separate tools. With Cisco\u2019s Secure Networking approach, that model flips entirely. The infrastructure itself becomes an active participant in the security posture of the network.<\/span><\/b> Verifying who and what connects to the network is critical, but\u00a0as any IT professional knows, you\u00a0always\u00a0have to\u00a0plan for the \u2018what if\u2019.\u00a0\u00a0If a device or AI agent is compromised, we\u00a0need\u00a0to ensure it cannot move laterally across the network.\u00a0<\/p>\n We use Cisco ISE\u00a0to\u00a0isolate\u00a0devices into specific segments\u00a0and\u00a0prevent a single\u00a0compromised endpoint from\u00a0impacting\u00a0the rest of the network\u00a0\u2013 limiting the blast\u00a0radius.\u00a0With it,\u00a0we\u2019ve\u00a0realized a simplified network edge: one where every single edge port is\u00a0configured\u00a0the same\u00a0way.\u00a0Segmentation is then customized for the client device at runtime\u00a0wherever that client connects\u00a0to\u00a0the network. As network operators, we no longer worry if the port is configured correctly for the client because the configuration\u00a0is applied by ISE at runtime.\u00a0<\/p>\n For both users and administrators, the trade-off between experience and security is now eliminated.<\/p>\n<\/li>\n Zero Trust\u00a0Access, active infrastructure, and segmentation address how we protect the network. This next area addresses something different: how we run it.\u00a0<\/p>\n Managing a global enterprise network at Cisco\u2019s scale means thousands of edge devices\u00a0are\u00a0generating continuous streams of data \u2014\u00a0an astronomically high amount of telemetry and alerts. Historically, making sense of that data required engineers to manually query systems, investigate alerts, and execute changes. It was high-overhead work that pulled skilled people away from higher-value problems.\u00a0<\/p>\n That\u2019s\u00a0changing.\u00a0We\u2019ve\u00a0integrated AI agents into both our security and networking operations \u2014 and the impact on how our team works has been immediate.\u00a0<\/p>\n Here\u2019s one example: Cisco IT uses Splunk Cloud Platform to aggregate and index network data from across our environment. Today, engineers can instruct AI agents to query Splunk directly \u2014 surfacing insights, identifying anomalies, and executing defined tasks like bouncing ports or flagging policy exceptions \u2014 without requiring manual intervention at every step. What previously took an engineer significant time to investigate can now be delegated, executed, and returned as an actionable insight.\u00a0<\/p>\n The implications extend well beyond\u00a0a single use\u00a0case. Agents are being applied across coding platforms, our internal AI assistant, and routine network operations \u2014 automating high-overhead manual changes and freeing our team to focus on work that requires human judgment.\u00a0<\/p>\n This is what we call\u00a0AgenticOps\u00a0\u2014 and it\u00a0represents\u00a0a new frontier for enterprise IT. There is no historical playbook here. AI agents\u00a0operating\u00a0under the direction of network engineers, across both security and networking functions, is a capability that simply\u00a0didn\u2019t\u00a0exist at scale until now. The use cases will continue to expand as we explore\u00a0what\u2019s\u00a0possible.\u00a0<\/p>\n For IT leaders thinking about where AI delivers real operational value \u2014 not theoretical value, but actual time saved and risk reduced \u2014 the network operations layer is one of the most compelling answers\u00a0we\u2019ve\u00a0found.\u00a0<\/span><\/p>\n<\/li>\n<\/ul>\n The results\u00a0of our approach\u00a0were better than we expected.<\/span>\u00a0<\/span><\/p>\n We see\u00a0significantly fewer threats successfully penetrating the network.\u00a0For our team, that translates directly to fewer incident escalations, less time spent on reactive firefighting, and more capacity for the kind of forward-looking infrastructure work that actually moves the organization forward.\u00a0That\u2019s\u00a0led to as much as a 40% drop in incidents reported\u00a0in\u00a0many of our sites.<\/span>\u00a0<\/span><\/p>\n The user experience\u00a0improved,\u00a0too.\u00a0Passwordless\u00a0authentication, seamless segmentation, faster and more reliable connectivity \u2014 all without\u00a0additional\u00a0friction. That is not a common outcome when you raise the security bar. It happened here because the security and network layers were designed to work together, not forced to cooperate.<\/span>\u00a0<\/span><\/p>\n And with AI agents now handling the routine operational work, our engineers are doing more of the work that\u00a0actually requires\u00a0them.<\/span>\u00a0<\/span><\/p>\n Built together, not bolted together<\/span><\/b>\u00a0<\/span><\/p>\n Here is the fundamental truth this upgrade confirmed:<\/span>\u00a0<\/span><\/b>Because Cisco builds both the network and the security layer, they\u00a0don\u2019t\u00a0feel\u00a0bolted together \u2013\u00a0they\u2019re\u00a0built together.\u00a0<\/span><\/b>That\u2019s\u00a0a fundamental advantage most organizations\u00a0don\u2019t\u00a0yet\u00a0have but\u00a0urgently\u00a0need.<\/span>\u00a0<\/span><\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n That is an architectural advantage that shows up every time a threat is stopped before it becomes an incident. It shows up in the operational simplicity our team now has. It shows up in a user experience that got better, not worse, when we raised the security bar.<\/span>\u00a0<\/span><\/p>\n Most organizations\u00a0don\u2019t\u00a0have that yet. Many are still running the old model \u2014 connectivity\u00a0first,\u00a0security patched on top \u2014 while the threat environment they face has fundamentally changed.<\/span>\u00a0<\/span><\/p>\n Cisco\u2019s Secure Networking approach exists to close that gap. Not by adding another layer of security on top of a network that wasn\u2019t designed for it \u2014 but by building security into the network from the ground up, at every layer, from the access point to the router to the policy engine.<\/span>\u00a0<\/span><\/p>\n The network is the security layer. For Cisco IT, Wi-Fi 7 proved it.<\/span>\u00a0<\/span>\u00a0<\/span><\/p>\n \u00a0<\/p>\n \u00a0<\/p>\nOne system, not two<\/h2>\n
We expected faster Wi-Fi. Security was\u00a0the\u00a0real story.<\/span><\/b>\u00a0<\/span><\/h2>\n
\n
<\/span>
Cisco 8000 Series routers<\/span><\/b>\u00a0carry built-in\u00a0firewall\u00a0capabilities, enforcing network perimeters without requiring a separate security appliance at every site.<\/span>
<\/span>
Smart Switches<\/span><\/b>\u00a0enable switching-layer encryption and built-in security across every port. Linked with Adaptive Policy in Meraki, they assign and carry security tags through the wired network \u2014 preserving identity context that traditional networking simply discards at the access layer.<\/span>
<\/span>
Cisco access points<\/span><\/b>\u00a0deploy beacon protection, closing the door on attack vectors like Evil Twin \u2014 a threat that has historically been difficult to defend at the wireless layer.<\/span>
<\/span>
The infrastructure is no longer passive. Every device plays a role in defending the network it enables.<\/span><\/p>\n<\/li>\nNoticeable\u00a0impacts<\/span><\/b>\u00a0<\/span><\/h2>\n
\u00a0\u201c<\/span><\/i>Because Cisco builds both the network and the security layer, they don\u2019t feel bolted together \u2013 they feel built together.\u201d<\/span><\/i>\u00a0<\/span><\/h2>\n