When Cisco IT upgraded to Wi-Fi 7, faster connectivity was the expected headline. What surprised us was this: the security gains outpaced the networking gains. Here’s what happened — and what it means for every organization still treating security as an add-on.
One system, not two
At my core, I believe that networking and security should not and cannot be separated. If one is an afterthought, the other will suffer. Most enterprise networks were built for connectivity first. Security came later — layered on top, patched in, bolted together. For years, that was an acceptable trade-off.
It isn’t anymore.
The world of IT is becoming unprecedented; AI threats are accelerating. identities are multiplying across users, devices, and AI agents, and quantum threats are on the horizon. The old model — network first, security second — was never designed to survive what’s coming. Organizations still operating that way are leaving a structural gap that attackers are already learning to exploit.
At Cisco IT, we’ve held a different belief for years: networking and security cannot be separated. If one is treated as an afterthought, the other will suffer. The IT industry agrees and we’re seeing shifts — 83% of network engineers now have security as part of their remit (ZK Research, 2025). But believing it and building it are two different things.
When we upgraded to Wi-Fi 7, we found out what it looks like to build them together — and what that difference means in practice.
We expected faster Wi-Fi. Security was the real story.
Going into the Wi-Fi 7 upgrade, we had clear expectations: better data throughput, improved availability, stronger performance at scale. Those gains arrived. But what we didn’t fully anticipate was the degree to which Wi-Fi 7 would accelerate our security posture — not as a side effect, but as a core outcome.
The security gains didn’t just keep pace with the networking gains. They outran them.
That was the moment it became clear: Wi-Fi 7 wasn’t just a network upgrade. It was an opportunity to operationalize the Cisco Secure Networking approach — built on the principle that security and networking should be inherently and architecturally connected, not bolted together after the fact.
Here’s what that looks like in practice:
- Reinforcing zero trust access:
Zero trust has been an enterprise priority for years. Organizations have built sophisticated verification systems to ensure only trusted devices and users gain access. But there was always a vulnerability hiding in plain sight: if the wireless association itself could be spoofed, intercepted, or manipulated, the entire zero trust foundation was compromised.
Wi-Fi 7 and Cisco Identity Services Engine (ISE) close that gap. We use ISE to verify every endpoint using Wi-Fi Protected Access 3 (WPA3) — cryptographically hardening authentication at the network layer so connections cannot be spoofed or manipulated before access is granted.
Once connected, ISE integrates with Duo‘s multi-factor authentication (MFA) and Cisco Secure Access to enable passwordless authentication across the business. The result: less login friction for users, real-time risk-aware policy enforcement for IT, and an authentication foundation that holds under pressure.
Zero trust doesn’t start at the application layer. It starts at the wireless association. Now ours does too.
- Fortifying secure infrastructure:
Now that the foundations were in place, we needed to secure the infrastructure itself.
Traditionally, network infrastructure was treated as passive. Switches switched. Routers routed. Access points emitted signal. Security lived somewhere else, managed by a separate team, enforced by separate tools. With Cisco’s Secure Networking approach, that model flips entirely. The infrastructure itself becomes an active participant in the security posture of the network.
Cisco 8000 Series routers carry built-in firewall capabilities, enforcing network perimeters without requiring a separate security appliance at every site.
Smart Switches enable switching-layer encryption and built-in security across every port. Linked with Adaptive Policy in Meraki, they assign and carry security tags through the wired network — preserving identity context that traditional networking simply discards at the access layer.
Cisco access points deploy beacon protection, closing the door on attack vectors like Evil Twin — a threat that has historically been difficult to defend at the wireless layer.
The infrastructure is no longer passive. Every device plays a role in defending the network it enables. - Segmenting the network:
Verifying who and what connects to the network is critical, but as any IT professional knows, you always have to plan for the ‘what if’. If a device or AI agent is compromised, we need to ensure it cannot move laterally across the network.
We use Cisco ISE to isolate devices into specific segments and prevent a single compromised endpoint from impacting the rest of the network – limiting the blast radius. With it, we’ve realized a simplified network edge: one where every single edge port is configured the same way. Segmentation is then customized for the client device at runtime wherever that client connects to the network. As network operators, we no longer worry if the port is configured correctly for the client because the configuration is applied by ISE at runtime.
For both users and administrators, the trade-off between experience and security is now eliminated.
- Putting AI agents to work on the network:
Zero Trust Access, active infrastructure, and segmentation address how we protect the network. This next area addresses something different: how we run it.
Managing a global enterprise network at Cisco’s scale means thousands of edge devices are generating continuous streams of data — an astronomically high amount of telemetry and alerts. Historically, making sense of that data required engineers to manually query systems, investigate alerts, and execute changes. It was high-overhead work that pulled skilled people away from higher-value problems.
That’s changing. We’ve integrated AI agents into both our security and networking operations — and the impact on how our team works has been immediate.
Here’s one example: Cisco IT uses Splunk Cloud Platform to aggregate and index network data from across our environment. Today, engineers can instruct AI agents to query Splunk directly — surfacing insights, identifying anomalies, and executing defined tasks like bouncing ports or flagging policy exceptions — without requiring manual intervention at every step. What previously took an engineer significant time to investigate can now be delegated, executed, and returned as an actionable insight.
The implications extend well beyond a single use case. Agents are being applied across coding platforms, our internal AI assistant, and routine network operations — automating high-overhead manual changes and freeing our team to focus on work that requires human judgment.
This is what we call AgenticOps — and it represents a new frontier for enterprise IT. There is no historical playbook here. AI agents operating under the direction of network engineers, across both security and networking functions, is a capability that simply didn’t exist at scale until now. The use cases will continue to expand as we explore what’s possible.
For IT leaders thinking about where AI delivers real operational value — not theoretical value, but actual time saved and risk reduced — the network operations layer is one of the most compelling answers we’ve found.
Noticeable impacts
The results of our approach were better than we expected.
We see significantly fewer threats successfully penetrating the network. For our team, that translates directly to fewer incident escalations, less time spent on reactive firefighting, and more capacity for the kind of forward-looking infrastructure work that actually moves the organization forward. That’s led to as much as a 40% drop in incidents reported in many of our sites.
The user experience improved, too. Passwordless authentication, seamless segmentation, faster and more reliable connectivity — all without additional friction. That is not a common outcome when you raise the security bar. It happened here because the security and network layers were designed to work together, not forced to cooperate.
And with AI agents now handling the routine operational work, our engineers are doing more of the work that actually requires them.
Built together, not bolted together
Here is the fundamental truth this upgrade confirmed: Because Cisco builds both the network and the security layer, they don’t feel bolted together – they’re built together. That’s a fundamental advantage most organizations don’t yet have but urgently need.
“Because Cisco builds both the network and the security layer, they don’t feel bolted together – they feel built together.”
That is an architectural advantage that shows up every time a threat is stopped before it becomes an incident. It shows up in the operational simplicity our team now has. It shows up in a user experience that got better, not worse, when we raised the security bar.
Most organizations don’t have that yet. Many are still running the old model — connectivity first, security patched on top — while the threat environment they face has fundamentally changed.
Cisco’s Secure Networking approach exists to close that gap. Not by adding another layer of security on top of a network that wasn’t designed for it — but by building security into the network from the ground up, at every layer, from the access point to the router to the policy engine.
The network is the security layer. For Cisco IT, Wi-Fi 7 proved it.
Learn More:
[1] Zeus Kerravala, ZK Research, 2025
