Skip to content
CONFIGLANE
Enquire

Technical articles

Cisco networks —what matters now.

Articles from daily work on Cisco networks: regulation, technology and operations — researched, dated and with sources on the record. No product marketing, no invented metrics.

Latest article

Brotli at Cisco: first product findings and fix information

Cisco 1.2: SSM fixed release, further planned corrections and Nexus Dashboard unaffected. Priority products remain under investigation.

Read the article
Published
26 October 2026
Reading time
6 min
Topic
Security & Access

All articles

Security & Access22 October 2026

PHP2Shell and Cisco products: security status and actions

Cisco advisory 1.11 confirms wireless fix 26.2.1.9 is available. Product status and incident investigation guidance checked against current sources.

17 min read

Security & Access25 September 2026

Cisco ISE after 16 September: patch, upgrade from 3.1/3.2, rethink certificates

Patch level, the end of ISE 3.1/3.2, appliance dates and the loss of clientAuth: what ISE owners should do after the 16 September vulnerability, and in which order.

11 min read

Cisco Meraki25 September 2026

Meraki SD-WAN design: sizing hubs, choosing routing and adding branches cleanly

Hub-and-spoke as Meraki recommends it, hubs sized by tunnel count, BGP and VRF from MX 26.2, hardware beyond MX 18.1 — and a checklist for the next branch.

10 min read

Enterprise Networks25 September 2026

Catalyst 2960-X and 3650 end of life: dates, successors and a migration plan

The 3650 loses support on 31 October 2026, the 2960-X a year later: the dates, Cisco's successors and the order in which the replacement can be planned.

11 min read

Cisco Catalyst Center25 September 2026

Catalyst Center 2.3.7: maintenance ends in December, and the road to 3.x runs one way

Maintenance for 2.3.7 ends in December, DN3 goes end-of-sale and DN4 needs 3.3.1: the decisions ahead of a Catalyst Center 3.x upgrade and what a dependable plan looks like.

10 min read

OT Security25 September 2026

Supplier remote access you can audit: Cisco Cyber Vision Secure Remote Access

What Cisco Cyber Vision Secure Remote Access, formerly SEA, does for remote maintenance by machine suppliers, which hardware it runs on, when the licence is already included and what the operator still has to settle.

10 min read

OT Security27 August 2026

Cyber Vision as a data source: OT visibility that keeps working

Zones that ISE and the firewall enforce; baseline differences as a change watch; inventory and risk scores for evidence: what the Cyber Vision API provides — and what to connect it to.

5 min read

Network Automation27 August 2026

Ansible on IOS XE: changes you can read before they run

Merged, replaced, overridden: how resource modules turn commands into state, why no run starts without a dry run and a diff — and which states run without any device at all.

6 min read

Network Automation27 August 2026

NetBox as the source of truth: the intended state comes first

Automation needs one instance that says what should be true. Why NetBox holds the intended state instead of importing the live one, the order to fill it, and the handover to Ansible.

9 min read

Cisco Catalyst Center26 August 2026

Catalyst Center is an API with a UI — not the other way round

Intent, events, integration: three API directions that make Catalyst Center more than a dashboard. And the division of labour with NetBox and Ansible that keeps two automations from fighting each other.

6 min read

Cisco Meraki26 August 2026

Meraki or Catalyst: the question has moved

Cloud monitoring for Catalyst stopped working on 31 March 2026, and migrating into Meraki management mode resets the switch. Why the decision now falls earlier than it used to.

6 min read

Cisco Meraki26 August 2026

Meraki across many sites: what templates actually do

One template per site type, claiming by order claim key, exceptions named rather than collected: the parts of a Meraki rollout that are expensive to correct afterwards.

7 min read

Cisco Meraki26 August 2026

Meraki licensing: Co-Term vs Subscription — which model fits?

Co-termination averages every term onto one shared date, subscription licenses per network. What that means in a branch estate — and why the two models behave fundamentally differently at expiry.

14 min read

Small Business3 August 2026

The copper network is being retired: what that means for your business line

Your line will be migrated to fibre at some point. Which conditions apply, how much notice you get, and which devices in the building are affected.

5 min read

Security & Access2 August 2026

After the NIS2 deadline: what network segmentation has to prove

The grace period has passed, the duty has not. How a flat network becomes a defensible zone architecture — and which artefacts carry the proof.

9 min read

Small Business1 August 2026

NIS2 may not apply to you — but it does to your largest customer

You are not in scope for NIS2, but your customer is — and passes the duty on contractually. Which six areas get asked about, and what counts as evidence.

5 min read

Network Automation31 July 2026

From 398 to 47 days: what short TLS certificates set off in a network

First 200, then 100, from 2029 47 days: why shorter certificate lifetimes are mainly a network operations problem — and which places break first.

7 min read

Small Business30 July 2026

Cyber insurance: checking technical requirements properly

MFA, tested backups and network separation: what can be checked technically and why the requirements of the actual policy matter.

4 min read

OT Security28 July 2026

CRA reporting is in force: how OT operators can respond.

The reporting duty is in force. How operators can assess vendor advisories and respond using inventories, zones and controlled communication paths.

7 min read

Cisco Meraki27 July 2026

Guest wireless: operator liability is gone — the duties are not

Operator liability is abolished, information and data protection duties remain. What a guest network needs technically and legally — and what it explicitly does not need.

6 min read

Security & Access24 July 2026

When the controller is the door: the lesson of the SD-WAN year 2026

Two maximum-severity flaws in SD-WAN management, actively exploited, with a three-day deadline. What that means for reachability, patch windows and evidence on the control plane.

6 min read

Small Business23 July 2026

The network grew with you: seven signs it is time for a plan

No network grows to a plan. Seven symptoms showing the limit has been reached — and the order in which to tidy a grown network without stopping it.

5 min read

Network Automation21 July 2026

AgenticOps without illusions: what a network needs before agents work in it

Cloud Control, AI Canvas, a purpose-built network model: what was actually announced in 2026 — and the four foundations without which an agent is only faster at being wrong.

7 min read

Enterprise Networks20 July 2026

Buying senior capacity without giving up the customer relationship

The project is there, the senior engineer is not. Which models exist for bought-in engineering capacity, what has to be contractually settled, and which three mistakes cost the customer relationship.

5 min read

Cisco Catalyst Center17 July 2026

Which Cisco IOS XE release you should run — and why “the latest” is the wrong rule

Up to 17.18 only every third IOS XE train is long-lived; IOS XE 26 brings a new model. How to choose the version you can actually plan against.

8 min read

Network Automation16 July 2026

How to tell that a network project is genuinely finished

“It works” is not an acceptance criterion. Six artefacts a network project must leave behind so operations continue without its builder — and the questions to ask first.

5 min read

Enterprise Networks14 July 2026

Post-quantum in the network: what is available today and what to prepare now

RFC 9370 on ASA since 9.19, ML-KEM announced for late 2026: the dependable state of post-quantum migration in network infrastructure — and why the crypto inventory precedes any product upgrade.

7 min read

Enterprise Networks10 July 2026

Catalyst 9350 licensing: separating the mandatory term from perpetual OS rights

A mandatory three-year term does not cause local switching functions to expire: Cisco separates perpetual OS rights from support and platform services on the C9350.

4 min read

Cisco Meraki7 July 2026

Wi-Fi 7 in Europe: when 320 MHz makes sense

The RSPG recommends mobile priority for part of the upper 6 GHz band. Why we plan dense Wi-Fi 7 networks around 80 or 160 MHz and MLO.

9 min read

Security & Access3 July 2026

802.1X on the wired port: the identity layer segmentation depends on

The network port as a control point: how a wired 802.1X rollout runs, why it starts in monitor mode, and which devices set the schedule.

6 min read

Next step

Does this hold for your network?

An assessment answers the question against your infrastructure rather than an example — ending in a first dependable change.

Request an assessment

Assessment → first dependable change