by Chris DePuy, 650 Group / October 23, 2026
Cisco this week outlined three wireless LAN enhancements that move agentic assurance, machine-readable network context, and quantum-resilient encryption down into its Wi-Fi access points. The items, shared in association with Cisco Partner Summit 2026, which runs October 26–28 in Vancouver, carry stated general availability dates of December 2026 for embedded Thousand Eyes agents on Wi-Fi 7 and Wi-Fi 6E access points, November 2026 for a Model Context Protocol (MCP) server for the networking platform, and January 2027 for over-the-air encryption for wireless clients.
Thousand Eyes Agents on Wi-Fi 7 and Wi-Fi 6E Access Points
The stated scope is Wi-Fi 6E and Wi-Fi 7 access points running the upcoming 33.1 firmware. Cisco said the capability begins with cloud-managed access points and extends later to devices under a WLC or Catalyst Center, with switching and routing platforms to follow. The agents are embedded, always-on, and auto-configured, and that is the point: it converts Thousand Eyes Assurance from a console an operator visits into a capability resident in the device
What does an always-on test agent inside an access point change?
IT teams that use Cisco’s cloud-managed wireless service see the change first, because the 33.1 firmware train that carries the embedded agents reaches cloud-managed access points before devices under a Wireless LAN Controller (WLC) or Catalyst Center (Meraki MR firmware release status and nomenclature). Controller-managed deployments receive the same telemetry on a later schedule.
Active Testing Coverage Sits Inside the Subscription, Not on top of It
Coverage is the commercial point. Cisco said validation of critical network services, specifically RADIUS, DHCP, and DNS, is included with the Cisco Networking Essentials tier, while customers on Cisco Networking Advantage gain testing to a limited number of external applications (Cisco Networking Subscription data sheet, updated September 2026). No additional licensing is required, the company confirmed, because the agentic operations capabilities are folded into the core networking subscriptions. The precedent is the synthetic-client program that already turns access points into test probes (Thousand Eyes on new AI and wireless innovations), built on the visibility platform Cisco acquired on August 7, 2020.
We read the licensing decision as the more consequential of the two announcements. Bundling continuous validation into a tier customers already buy removes the per-feature purchase decision that has slowed assurance adoption elsewhere in the category, and moves the argument from feature count to demonstrated outcome. As 650 Group has been tracking in its enterprise networking research, this market has trended toward per-feature add-ons and intelligence pushed down into the access point silicon (AI Networking Will Ramp As Enterprise Wi-Fi Access Points Move Into the Wi-Fi 8 Era). An always-on agent in the base subscription is a different commercial model, and one that rivals behind Celona’s Orion agentic platform must answer.
MCP Servers for the Networking Platform
The MCP server for the networking platform is scheduled for general availability in November 2026 and extends work Cisco has already done in the open. Cisco released Model Context Protocol servers for Meraki and Catalyst Center in August 2026 and lists network, security, and observability MCP servers in its Code Exchange AI catalog. MCP, the open standard for connecting AI models to tools and data, gives an agent a defined view of network state instead of a dashboard to read, and the use case Cisco describes is a helpdesk ticket that arrives with the access point, the location, and the authentication signals already attached.
Managed Service Providers Are Building on the MCP Layer
The partner response is the part we find most interesting. Cisco said partners have moved quickly to fold the MCP servers for Catalyst Center, Meraki, and Thousand Eyes into their own agentic harnesses and managed service offerings. The economics for a managed service provider are arithmetic: the network context a first-line engineer reads becomes an input to the provider’s own agent, while the provider keeps its workflow layer, its ticketing system, and its customer relationship. We think this is the first place enterprise agentic networking is earning margin outside the vendor’s license line.
Over-the-Air Encryption and the Post-Quantum Clock
The third item applies post-quantum cryptography to the client link itself, with general availability stated for January 2027. Cisco’s Trust Center post-quantum cryptography program commits the company to post-quantum protection through most of its core portfolio by December 2026 , naming Harvest Now, Decrypt Later and Trust Now, Forge Later as the threats. On the wide area side, AT&T Business said in May 2026 it had the first such service among major North American providers, built on Cisco’s 8000 Series Secure Router. Extending that protection over the air closes what a wired-only migration leaves open, the key exchange with the client at association time.
We read the January 2027 date as Cisco leaning into security rather than treating it as an annex to connectivity, and it fits the theme Cisco carried through Cisco Live US in June 2026. In Security at Cisco Live: Going Shields Up for the Agentic Era, posted June 2, 2026, Peter Bailey of Cisco wrote that “the Mythos moment has shown how frontier models can accelerate vulnerability discovery.” Encryption that holds against a future adversary, delivered on the last 100 feet, extends that posture from the data center to the conference room, the ground 650 Group examined in its analysis of Cisco’s full-stack security work.
Conclusion
November 2026 gives the network a published interface for agents; December 2026 puts a test agent on the access point; January 2027 secures the client link against a future adversary as well as a present one. If Cisco holds that schedule, the enterprise access point finishes the transition from radio to instrument, and the argument in the category shifts from features to evidence. The open question is how much of the value the new MCP layer creates partners capture in their own service margins rather than the vendor in its license line. 650 Group researches several of the technologies we covered in this blog, including Enterprise, Security and SASE, and Data Center / Cloud, and more.
