The long-standing idea that wireless is more than connectivity is rapidly becoming a day-to-day reality. It is the primary interface for people, devices, machines and AI systems. This transition makes security a top priority, and AI adds a new level of urgency to this mission. AI agents are moving beyond occasional user requests as organizations put more compute closer to employees. Apple’s recent mobile AI announcements, Facebook Muse, plus the rumored OpenAI device mean the next generation of agents are close to mass market adoption.

That shift will create more always-on clients, new traffic patterns and greater upstream demand. Most mobile traffic already travels over Wi-Fi, and AI workloads will increase the amount of data, context, telemetry and instructions moving back into the network.

The challenge is not just the volume of traffic. It is traffic from identities that can act continuously, interact with services, and move between access points. That changes the role the network must play in securing the enterprise.

The network is the only enforcement layer that is always present

Getting ahead of this starts with the network. Every identity, device, AI agent, and workload traverses the network.

Most security tools only protect a specific moment. Access controls check a device when it logs in, and data loss prevention flags files when they leave the organization. The network, however, sees what happens between those events. It can identify lateral movement, unusual behavior and workload-to-workload communication while traffic is moving. It can also enforce policy continuously, rather than only when a device first connects or data is about to leave. Security therefore needs to be part of the network itself.

Cisco connects networking, security, applications, experience and third-party information through a common data foundation. That shared context helps teams apply policy consistently, understand activity across the environment, and detect and respond to threats more quickly.

Wireless is central to this approach because it is how people, things, machines, and agents experience the network. Securing that experience means protecting both the traffic moving across wireless today and the infrastructure that must remain trusted as cryptography evolves.

Wireless infrastructure deployed today will operate through major cryptographic changes. And this has already started with “harvest now, decrypt later”, where attackers are actively capturing encrypted traffic now to decrypt and exploit when quantum capabilities become available. Quantum risk also affects device identities, software signatures, and secure updates. Organizations may not know when quantum capabilities become operational, making it important to build these protections into infrastructure before those capabilities can be used against them. Customers need a planned migration path that protects current investments and preserves trust across the wireless connection. Putting these protections in place now helps customers protect long-lived wireless investments before quantum capabilities can be used against them.

Secure wireless foundation: The industry’s first quantum-ready Wi-Fi 7 Access Point and Wireless LAN Controllers

Cisco is launching the Cisco Wireless CW9176ISEC, the industry’s first Wi-Fi 7 access point with quantum-resilient capabilities. The CW9176ISEC builds on the Cisco Wireless CW9176I, adding security capabilities designed to meet stringent requirements for national security systems across the globe as well as for organizations with demanding security and compliance requirements. This is the first access point with quantum-safe capabilities aligned to CNSA 2.0, the NSA’s updated set of quantum-resistant algorithms. Starting January 1, 2027, all new national security system deployments must comply with CNSA 2.0, with fielded equipment targeted to complete the transition by the end of 2030.

Starting in January, Cisco Wireless 9800 Series Wireless Controllers and Campus Gateways are also being refreshed to bring the same quantum-resilient security capabilities as the CW9176ISEC. These advances show how we’re building trust into the infrastructure.

PQC over the air protects the complete wireless experience

Cisco is partnering with Qualcomm Technologies, Microsoft and Intel to help pioneer quantum-safe enterprise wireless with PQC over the air (OTA). Available starting in January across Cisco’s Wi-Fi 7 access point portfolio this feature brings quantum-safe communications across the network infrastructure, operating system, and client hardware, such as laptops and mobile devices. Cisco provides Qualcomm Technologies-powered access points while the complete client-side solution is supported by an Intel Wi-Fi chipset and driver and Microsoft for Windows system software. Meaning that your existing wireless ecosystem can support quantum-safe communications without having to rip and replace equipment.

Microsoft is committed to advancing quantum-safe security on Windows for all our customers. We’re pleased to collaborate with Intel to deliver this security on Windows PCs and with Cisco to extend quantum-safe Wi-Fi protection to enterprise wireless infrastructure. Together, we’re helping strengthen encryption and build more resilient protection so customers can prepare for emerging threats and invest confidently in their future. Dana Huang, Corporate Vice President, Windows Security

Microsoft is committed to advancing quantum-safe security on Windows for all our customers. We’re pleased to collaborate with Intel to deliver this security on Windows PCs and with Cisco to extend quantum-safe Wi-Fi protection to enterprise wireless infrastructure. Together, we’re helping strengthen encryption and build more resilient protection so customers can prepare for emerging threats and invest confidently in their future.

Dana Huang, Corporate Vice President, Windows Security

Cisco Wireless access points, wireless controllers, and Campus Gateways also work with the wider Cisco security portfolio, supporting identity controls, security operations and assurance capabilities. You can combine PQC OTA with micro segmentation using security group tags to enable quantum-safe communications with visibility to east-west traffic that most organizations struggle with. Not to mention Cisco Resilient Infrastructure which provides built-in warnings that highlight potentially insecure configurations, making it easier for teams to see where action is needed. While Live Protect on Cisco Wireless LAN Controllers and Campus Gateways close the gap between vulnerability disclosure and patch completion without disrupting your operations.

Securing global networks against quantum threats demands deep hardware-software integration to satisfy stringent CNSA 2.0 requirements. Intel’s Wi-Fi products form the foundation of this next-generation client connectivity security, enabling robust post-quantum cryptography. In collaboration with Cisco and Microsoft, we are ensuring enterprise networks remain secure, resilient, and ready for the quantum era. David Feng, Vice President and General Manager, Client Business Group at Intel

Securing global networks against quantum threats demands deep hardware-software integration to satisfy stringent CNSA 2.0 requirements. Intel’s Wi-Fi products form the foundation of this next-generation client connectivity security, enabling robust post-quantum cryptography. In collaboration with Cisco and Microsoft, we are ensuring enterprise networks remain secure, resilient, and ready for the quantum era.

David Feng, Vice President and General Manager, Client Business Group at Intel

Validating the authenticity of devices connecting to your network

In this new world order, we all know that security should not stop at the access point. The connection between the access point and the switch also needs protection.

MACsec provides encryption between the access point and switchport. Traditionally, enabling it could require detailed, port-by-port configuration. That can create operational complexity when securing wireless deployments at scale.

Auto MACsec simplifies this process.

It automatically detects compatible Wi-Fi 7 access points, applies the required security policies and establishes certificate-based encryption between the access point and switch.

When an access point moves to another port, the protection follows automatically. The switch repeats the process without requiring an administrator to manually configure the new interface.

Auto MACsec is available now with IOS XE 26.2.1 and is supported on Cisco C9350 Series Smart Switches. It is available out of the box with the Cisco Wireless CW9176ISEC. Existing access points can establish MACsec and 802.1X without manual configuration after upgrading to IOS XE 26.2.1.

A more secure wireless future

The CW9176ISEC is the hero of this launch as the industry’s first quantum-safe secure-boot-ready Wi-Fi 7 access point, but the message is broader:

Customers must prepare for more agents, more diverse devices, and mobile AI today. And because organizations are wireless-first, wireless is now part of the organization’s security perimeter. It sees the connections, carries the traffic, and provides the context needed to enforce policy continuously. That’s why Cisco is strengthening trust across the wireless path, including, quantum-safe secure boot, client-to-AP communications, AP-to-management communications, and AP-to-switch protection with MACsec.

Wireless is the next security frontier. Cisco is helping customers meet that reality by making security part of the wireless infrastructure itself.

“Preparing for the quantum computing era is not a challenge for the future, it is a priority for today. The networks, devices and infrastructure being deployed now will still be in the field when quantum threats become mainstream, making early adoption of quantum-resistant security essential. Qualcomm Technologies is helping advance this transition by driving foundational security technologies for the next generation of wireless networks and devices.” said Gautam Sheoran, Senior Vice President and General Manager, Connectivity, Broadband and Networking, Qualcomm Technologies, Inc. “We’re pleased to work with Cisco, Intel, and Microsoft to bring together innovation across the technology stack and help lay the foundation for more secure, trusted networks.”