{"id":5949,"date":"2026-09-27T14:10:45","date_gmt":"2026-09-27T19:10:45","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=5949"},"modified":"2026-09-27T14:10:45","modified_gmt":"2026-09-27T19:10:45","slug":"agentic-netops-september-27-2026","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=5949","title":{"rendered":"Agentic NetOps &mdash; September 27, 2026"},"content":{"rendered":"<style>\n.single .entry-title,\n.single .entry-header .entry-title,\n.single .post-title,\n.single header.entry-header h1,\n.single h1.entry-title,\n.single .page-title,\n.post-template-default h1.entry-title,\n.post-template-default .entry-header,\narticle .entry-header,\narticle .entry-title { display: none !important; }\n.single .entry-header { margin: 0 !important; padding: 0 !important; }\n.single .entry-content { margin-top: 0 !important; padding-top: 0 !important; }\n<\/style>\n<table role=\"presentation\" class=\"wrapper\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n<tr>\n<td align=\"center\">\n<table role=\"presentation\" class=\"container\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"680\">\n<p>        <!-- Banner --><\/p>\n<tr>\n<td class=\"banner\" style=\"background-color:#312e81;background:linear-gradient(135deg,#312e81 0%,#4338ca 100%);padding:36px 32px;color:#ffffff;\">\n<p class=\"date\" style=\"color:#ffffff !important;\">September 27, 2026 &middot; Weekly Edition<\/p>\n<h1 style=\"color:#ffffff !important;\">Agentic NetOps<\/h1>\n<p class=\"tagline\" style=\"color:#ffffff !important;\">Enterprise buyers said yes to autonomous network operations this week &mdash; with conditions. A Cisco-commissioned Omdia survey found 80% of network leaders comfortable giving AI an autonomous role, and 56% still requiring human approval. Extreme went after Cisco and HPE through the channel as HPE widened Juniper&rsquo;s distribution. Selector bet on customer-built agents, and NETSCOUT and IP Fabric both repositioned as the context layer other vendors&rsquo; agents run on.<\/p>\n<\/td>\n<\/tr>\n<p>        <!-- At a glance --><\/p>\n<tr>\n<td class=\"content\">\n<h2>This week at a glance<\/h2>\n<p>The demand side moved first. A survey of 1,000 IT and network operations leaders, fielded by <strong>Omdia<\/strong> and commissioned by <strong>Cisco<\/strong>, found 80% comfortable granting AI a &ldquo;high or fully autonomous role&rdquo; in network operations, 51% already running agentic AI tools in production for real-time corrective action, and 84% expecting a fully AI-led operating model within twelve months. Read alone, that says the buying window is open now. Read with the rest of the survey, it says something more precise: 56% still require human approval for AI actions, only 24% are comfortable with no oversight, and 99% require guardrails before they will trust an agent. Buyers are ready to buy autonomy; they are not yet ready to let go of the approval step. The same study also hands incumbents and challengers an argument each. 95% say existing AIOps tools fall significantly short &mdash; a displacement signal for anyone selling against them &mdash; while Cisco&rsquo;s own release says 86% see an integrated platform as the most effective approach, a framing that favours a single-vendor stack.<\/p>\n<p>The competitive side moved through the channel. <strong>Extreme Networks<\/strong> spent the week telling CRN it is taking share from Cisco and <strong>HPE<\/strong>: CEO Ed Meyercord says $1 million-plus enterprise deals are up 36% year over year in the channel funnel, and Chief Commercial Officer Norman Rice says the HPE and <strong>Juniper<\/strong> channels are &ldquo;very disrupted&rdquo; by the merger while confusion around the Cisco 360 partner programme is something Extreme is &ldquo;capitalizing on.&rdquo; Every share claim is Extreme&rsquo;s own, and the &ldquo;six hours versus six minutes&rdquo; line in the headline is a customer anecdote Meyercord has repeated on earnings calls since at least January, not new evidence. HPE&rsquo;s counter-move arrived on September 25, when <strong>D&amp;H Distributing<\/strong> became its North American distributor for the networking business, Juniper portfolio included. The fight for the enterprise network is being fought in partner economics, and Extreme is using its agentic platform, Platform ONE, as one of the incentives.<\/p>\n<p>The strategic question underneath all of it is who owns the agent and who owns the data it reasons over. <strong>Selector<\/strong> launched Foundry, betting that network teams will build, test and govern their own agents &mdash; replayed against historical incidents before promotion &mdash; rather than accept a fixed vendor set. <strong>NETSCOUT<\/strong> and <strong>IP Fabric<\/strong> both went a layer down in the same week, each opening its data to third-party AI agents and positioning as the trusted context other vendors&rsquo; agents consume rather than as the agent itself. On the buyer side, <strong>Nile<\/strong> published a financial-services survey showing 79.5% of institutions still rely on manual threat intervention; it is a vendor survey of 322 professionals and reads as marketing, but the manual-operations burden it describes is the same one the Omdia data measures. No analyst house published new NetOps software sizing this week, so the survey data is the market read: demand is real, trust is conditional, and the vendors that can show safe, supervised operation are the ones positioned to close it.<\/p>\n<div class=\"watchlist\">\n<h2>On our watch list<\/h2>\n<ul>\n<li><strong>Whether the 56% human-approval figure starts to fall.<\/strong> The Omdia survey puts comfort with autonomy at 80% and expectation of a fully AI-led operating model within twelve months at 84%, yet 56% still require human approval for AI actions. That approval rate is the number that turns comfort into production change. If it has not moved materially by the next wave of this research, supervised autonomy &mdash; not full autonomy &mdash; is the product buyers will pay for next.<\/li>\n<li><strong>Which change categories buyers are willing to automate first.<\/strong> 82% accept AI making production changes without prior approval only in some categories of change. The first vendor to publish a named list of those categories with customer evidence behind it sets the default for everyone else&rsquo;s rollout plan.<\/li>\n<li><strong>Extreme&rsquo;s next earnings call, for bookings rather than anecdotes.<\/strong> Meyercord put quarterly Platform ONE subscription bookings at close to $50 million against a $38 million estimate in August and now claims 36% growth in $1 million-plus deals. The proof point is a named competitive takeout from Cisco or HPE with a disclosed outcome, not a repeat of the six-minutes line.<\/li>\n<li><strong>D&amp;H&rsquo;s first quarter selling Juniper.<\/strong> D&amp;H resellers can buy Juniper routers and switches from the end of September 2026. Watch whether HPE discloses partner sign-ups or channel-sourced numbers, and whether Extreme&rsquo;s &ldquo;very disrupted&rdquo; claim is still being made two quarters from now.<\/li>\n<li><strong>Cisco&rsquo;s response to the Cisco 360 confusion.<\/strong> Extreme&rsquo;s Chief Commercial Officer named the partner programme as an opening. Any clarification of designations, margins or incentives aimed at the partners Extreme is courting will tell you whether Cisco sees the channel risk as real.<\/li>\n<li><strong>Selector Foundry&rsquo;s first customer, price and ship date.<\/strong> None was disclosed. Selector also says it will adopt standard agent-interoperability protocols. A named customer running customer-built agents in production would be the first hard evidence that buyers want to own their agents rather than buy them.<\/li>\n<li><strong>Whether &ldquo;context supplier&rdquo; becomes a revenue line.<\/strong> NETSCOUT packaged its agent data connection as a licence-enabled capability on existing Omnis Sensors with no published price; IP Fabric opened its data to agents through a hosted service. Watch for a price, and for an agent platform naming either as its data source.<\/li>\n<li><strong>IP Fabric&rsquo;s application-inventory partners after Illumio.<\/strong> The service-aware digital twin depends on application data IP Fabric does not discover itself. Each new inventory partner is a measure of how far the digital-twin category can stretch toward the application owner.<\/li>\n<li><strong>Whether network-as-a-service interest converts.<\/strong> Nile&rsquo;s survey says 72.4% of financial institutions would consider secure NaaS. Futurum Group put actual NaaS adoption at 13% in last week&rsquo;s issue, and Gartner places the category in the trough of disillusionment. A named financial-services NaaS deployment would be the first sign the gap is closing.<\/li>\n<li><strong>Which Gartner number buyers quote back.<\/strong> Versa cites Gartner projecting 80% of enterprises using AI for network operations by 2030, up from under 30% in 2026; Olivier Gomez cites Gartner expecting more than 40% of agentic AI projects to be cancelled by the end of 2027. Whichever one starts appearing in RFPs tells you whether buyers are leading with ambition or with risk.<\/li>\n<\/ul><\/div>\n<p>            <!-- Topic map --><\/p>\n<div class=\"topic-map\">\n              <img decoding=\"async\" src=\"https:\/\/www.cybersecurityinstitute.com\/blog\/wp-content\/uploads\/2026\/09\/topic-map-agentic-netops-2026-09-27.png\" alt=\"Market map of this week&rsquo;s Agentic NetOps stories: the Cisco-commissioned Omdia survey linking autonomy versus human approval, agent governance, alert load and the integrated-platform versus multi-vendor question to the enterprise NOC buyer; Extreme Networks, Platform ONE, Ed Meyercord and Norman Rice in a channel-disruption cluster with Cisco, HPE, Juniper Networks, D&amp;H Distributing and channel partners; Selector and Selector Foundry around customer-built agents; NETSCOUT, Omnis AI Insights and IP Fabric around the context layer for agents and the network digital twin, linked to Splunk, Datadog, ServiceNow, Dynatrace and Illumio; Nile with network-as-a-service, manual operations and financial-services buyers; and the operating-model thread of TM Forum staged autonomy, agent reliability, the network engineer role, Gartner, ZK Research, IBM, Versa Networks, NetBrain and Devolutions\" loading=\"eager\" width=\"640\" style=\"width:100%;max-width:640px;height:auto;\"><\/p>\n<p class=\"caption\">Entities and connections across this week&rsquo;s 22 tracked stories. Node size reflects how often an entity appears; line weight reflects how often two appear together.<\/p>\n<p>              <!-- INTERACTIVE_MAP_LINK_START --><\/p>\n<p style=\"margin:10px 0 0;text-align:center;\"><a href=\"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=5948\" target=\"_blank\" rel=\"noopener\" style=\"display:inline-block;padding:8px 18px;background-color:#1e1b4b;color:#ffffff !important;text-decoration:none;border-radius:6px;font-size:13px;font-weight:600;\">View interactive topic map &rarr;<\/a><\/p>\n<p><!-- INTERACTIVE_MAP_LINK_END -->\n            <\/div>\n<p>            <!-- Article index --><\/p>\n<h2>Article index<\/h2>\n<h4>Competitive moves: the channel offensive<\/h4>\n<div class=\"cluster-intro\">Extreme Networks spent the week telling CRN, twice, that it is taking share from Cisco and HPE through the channel &mdash; the CEO on deal volume and Platform ONE bookings, the Chief Commercial Officer on partner disruption at HPE&ndash;Juniper and confusion around the Cisco 360 programme. HPE&rsquo;s answer arrived on September 25: D&amp;H Distributing becomes its North American distributor for the networking business, Juniper portfolio included. Two smaller signals round it out. Nile hired Srinivas Kavuri, formerly SVP of Engineering at Zscaler and earlier at Cisco, as Chief Development Officer reporting to CEO Pankaj Patel. And Devolutions, a secure-access and MSP-tools vendor, formalised a corporate venture arm that has made seven deals since 2025 &mdash; network monitor Obkio among them &mdash; at typical cheques of $500K to $3M.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>1. <a href=\"https:\/\/www.crn.com\/news\/networking\/2026\/what-took-cisco-six-hours-took-extreme-six-minutes-extreme-networks-ceo-details-ai-strategy-growth\">&lsquo;What Took Cisco Six Hours Took Extreme Six Minutes:&rsquo; Extreme Networks CEO Details AI Strategy, Growth<\/a><\/td>\n<td class=\"src\">CRN<\/td>\n<td class=\"dt\">Sep 22, 2026<\/td>\n<\/tr>\n<tr>\n<td>2. <a href=\"https:\/\/www.crn.com\/news\/networking\/2026\/extreme-coo-channel-simplicity-ai-demand-fuel-market-share-gains-against-cisco-hpe\">Extreme CCO: Channel Simplicity, AI Demand Fuel Market Share Gains Against Cisco, HPE<\/a><\/td>\n<td class=\"src\">CRN<\/td>\n<td class=\"dt\">Sep 21, 2026<\/td>\n<\/tr>\n<tr>\n<td>3. <a href=\"https:\/\/www.channeldive.com\/news\/dh-partners-gain-access-juniper-networks-portfolio-expanded-hpe-agreement\/831418\/\">D&amp;H partners gain access to Juniper portfolio in expanded HPE agreement<\/a><\/td>\n<td class=\"src\">Channel Dive<\/td>\n<td class=\"dt\">Sep 25, 2026<\/td>\n<\/tr>\n<tr>\n<td>4. <a href=\"https:\/\/www.businesswire.com\/news\/home\/20260924395373\/en\/Nile-Appoints-Srinivas-Kavuri-as-Chief-Development-Officer\">Nile Appoints Srinivas Kavuri as Chief Development Officer<\/a><\/td>\n<td class=\"src\">Business Wire<\/td>\n<td class=\"dt\">Sep 24, 2026<\/td>\n<\/tr>\n<tr>\n<td>5. <a href=\"https:\/\/www.morningstar.com\/news\/pr-newswire\/20260924sf45457\/devolutions-launches-devolutions-ventures-to-invest-in-the-next-generation-of-it-technology\">Devolutions Launches Devolutions Ventures to Invest in the Next Generation of IT Technology<\/a><\/td>\n<td class=\"src\">PR Newswire (via Morningstar)<\/td>\n<td class=\"dt\">Sep 24, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Competitive moves: who builds the agent, who supplies the context<\/h4>\n<div class=\"cluster-intro\">Three vendors, three answers to the same commercial question. Selector is betting that customers want to build and govern their own agents rather than accept a fixed vendor set. NETSCOUT and IP Fabric are positioning one layer down, as the trusted data that other vendors&rsquo; agents consume &mdash; NETSCOUT as network evidence feeding Splunk, Datadog, ServiceNow and Dynatrace, IP Fabric as a digital twin extended to application dependencies. NetBrain&rsquo;s own announcement on engineer-customisable agents landed the same week.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>6. <a href=\"https:\/\/www.networkworld.com\/article\/4225614\/selector-brings-git-based-workflows-and-incident-replay-to-network-ai-agents.html\">Selector brings Git-based workflows and incident replay to network AI agents<\/a><\/td>\n<td class=\"src\">Network World<\/td>\n<td class=\"dt\">Sep 23, 2026<\/td>\n<\/tr>\n<tr>\n<td>7. <a href=\"https:\/\/markets.ft.com\/data\/announce\/detail?dockey=600-202609220700BIZWIRE_USPRX____20260922_BW711379-1\">NETSCOUT Adds MCP Connectivity, Putting AI-Ready Smart Data Directly Into the Hands of AI Assistants and Agents<\/a><\/td>\n<td class=\"src\">Business Wire (via FT Markets)<\/td>\n<td class=\"dt\">Sep 22, 2026<\/td>\n<\/tr>\n<tr>\n<td>8. <a href=\"https:\/\/www.networkworld.com\/article\/4226178\/ip-fabric-8-1-adds-application-aware-mapping-and-cloud-native-data-model.html\">IP Fabric 8.1 adds application-aware mapping and cloud-native data model<\/a><\/td>\n<td class=\"src\">Network World<\/td>\n<td class=\"dt\">Sep 24, 2026<\/td>\n<\/tr>\n<tr>\n<td>9. <a href=\"https:\/\/www.sdxcentral.com\/news\/netbrain-to-let-engineers-customize-their-own-agents-to-accelerate-network-remediation\/\">NetBrain to let engineers customize their own agents to accelerate network remediation<\/a><\/td>\n<td class=\"src\">SDxCentral<\/td>\n<td class=\"dt\">Sep 22, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Buyer adoption and demand signal<\/h4>\n<div class=\"cluster-intro\">The week&rsquo;s demand data came from two surveys that need reading carefully. The Cisco-commissioned Omdia study of 1,000 IT and network operations leaders shows buyers ready for autonomy in principle and unwilling to give up approval in practice. Nile&rsquo;s survey of 322 financial-services professionals is a vendor&rsquo;s marketing research, and its findings map directly onto Nile&rsquo;s pitch. The three deployment stories are buyer-readiness reads rather than product news: Notre Dame replaced 955 switches across about 170 buildings in about five months (a guest column by Zeus Kerravala), HPE claims a 90% operational-efficiency gain at the 164-room Aethos London Shoreditch hotel, and CDW&rsquo;s BizTech sources its self-driving-network piece to a single HPE Networking sales director.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>10. <a href=\"https:\/\/www.networkworld.com\/article\/4225341\/80-of-network-pros-are-ok-with-giving-ai-an-autonomous-role-in-network-operations.html\">80% of network pros are OK with giving AI an autonomous role in network operations<\/a><\/td>\n<td class=\"src\">Network World<\/td>\n<td class=\"dt\">Sep 23, 2026<\/td>\n<\/tr>\n<tr>\n<td>11. <a href=\"https:\/\/newsroom.cisco.com\/c\/r\/newsroom\/en\/us\/a\/y2026\/m09\/cisco-ai-research-agenticops-scaling-quickly-in-the-enterprise.html\">Cisco AI Research: AgenticOps Scaling Quickly in the Enterprise<\/a><\/td>\n<td class=\"src\">Cisco Newsroom<\/td>\n<td class=\"dt\">Sep 23, 2026<\/td>\n<\/tr>\n<tr>\n<td>12. <a href=\"https:\/\/www.businesswire.com\/news\/home\/20260923407353\/en\/80-of-Financial-Institutions-Struggle-with-Breach-Containment-as-Network-Disruption-Rises-and-Costs-Climb\">80% of Financial Institutions Struggle with Breach Containment as Network Disruption Rises and Costs Climb<\/a><\/td>\n<td class=\"src\">Business Wire<\/td>\n<td class=\"dt\">Sep 23, 2026<\/td>\n<\/tr>\n<tr>\n<td>13. <a href=\"https:\/\/siliconangle.com\/2026\/09\/25\/notre-dames-network-refresh-shows-the-ai-era-starts-with-paying-down-technical-debt\/\">Notre Dame&rsquo;s network refresh shows the AI era starts with paying down technical debt<\/a><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Sep 25, 2026<\/td>\n<\/tr>\n<tr>\n<td>14. <a href=\"https:\/\/www.sdxcentral.com\/news\/hpe-hotel-refit-touts-ai-benefits-with-aruba-core\/\">HPE hotel refit touts AI benefits with Aruba core<\/a><\/td>\n<td class=\"src\">SDxCentral<\/td>\n<td class=\"dt\">Sep 23, 2026<\/td>\n<\/tr>\n<tr>\n<td>15. <a href=\"https:\/\/biztechmagazine.com\/article\/2026\/09\/ai-self-driving-networks-move-vision-reality\">AI Self-Driving Networks Move From Vision to Reality<\/a><\/td>\n<td class=\"src\">BizTech Magazine<\/td>\n<td class=\"dt\">Sep 21, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>The NOC operating model<\/h4>\n<div class=\"cluster-intro\">Four views of what changes when agents run the network. TM Forum, writing for carriers, lays out a staged path to autonomy: 20% of communications service providers expect Level 4 autonomy by 2027 and 80% by 2030, and China Mobile has cut fault-resolution time by 30%. Olivier Gomez&rsquo;s essay cites Gartner both ways &mdash; agents as the most common approach to network runtime activities by 2030, and more than 40% of agentic AI projects cancelled by the end of 2027. Selector&rsquo;s own blog frames reliability as the test the category has to pass, and Built In asks the workforce question directly.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>16. <a href=\"https:\/\/www.telecomtv.com\/content\/the-ai-native-telco-forum\/tm-forum-on-a-step-by-step-approach-to-autonomous-transformation-56303\/\">TM Forum on a step-by-step approach to autonomous transformation<\/a><\/td>\n<td class=\"src\">TelecomTV<\/td>\n<td class=\"dt\">Sep 22, 2026<\/td>\n<\/tr>\n<tr>\n<td>17. <a href=\"https:\/\/oliviergomez.substack.com\/p\/the-network-became-the-only-employee\">The Network Became the Only Employee That Never Sleeps<\/a> <em>(foundational)<\/em><\/td>\n<td class=\"src\">Olivier Gomez (Substack)<\/td>\n<td class=\"dt\">Sep 2, 2026<\/td>\n<\/tr>\n<tr>\n<td>18. <a href=\"https:\/\/www.selector.ai\/blog\/reliability-is-the-test-agentic-netops-has-to-pass\/\">Reliability Is the Test Agentic NetOps Has to Pass<\/a> <em>(foundational, Selector-authored)<\/em><\/td>\n<td class=\"src\">Selector AI<\/td>\n<td class=\"dt\">Sep 4, 2026<\/td>\n<\/tr>\n<tr>\n<td>19. <a href=\"https:\/\/builtin.com\/articles\/will-ai-replace-network-engineers\">Will AI Replace Network Engineers?<\/a> <em>(foundational)<\/em><\/td>\n<td class=\"src\">Built In<\/td>\n<td class=\"dt\">Sep 22, 2026<\/td>\n<\/tr>\n<\/table>\n<h4>Market sizing, analyst view and new approaches<\/h4>\n<div class=\"cluster-intro\">No analyst house published new NetOps software sizing this week; the Omdia survey above is the nearest analyst data point. What landed instead are three vendor framings of where the category goes next, each to be read as that vendor&rsquo;s perspective. IBM reports 93% of respondents see network automation as essential, 89% say networking matters more as AI arrives, and 61% are folding network observability into full-stack observability. Splunk and Accenture describe the path from AIOps to agentic operations across IT as a whole. Versa cites Gartner&rsquo;s projection that 80% of enterprises will use AI for network operations by 2030, up from under 30% in 2026.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>20. <a href=\"https:\/\/www.ibm.com\/think\/perspectives\/from-network-signals-to-business-decisions\">From network signals to business decisions<\/a> <em>(foundational, IBM-authored)<\/em><\/td>\n<td class=\"src\">IBM Think<\/td>\n<td class=\"dt\">Sep 10, 2026<\/td>\n<\/tr>\n<tr>\n<td>21. <a href=\"https:\/\/www.splunk.com\/en_us\/blog\/partners\/from-agentic-ops-to-autonomous-it-the-next-leap-in-technology-operations.html\">From Agentic Ops To Autonomous IT: The Next Leap in Technology Operations<\/a> <em>(foundational, Splunk-authored)<\/em><\/td>\n<td class=\"src\">Splunk<\/td>\n<td class=\"dt\">Sep 11, 2026<\/td>\n<\/tr>\n<tr>\n<td>22. <a href=\"https:\/\/versa-networks.com\/blog\/ai-driven-netops-trust-explainability-zero-trust-mcp\/\">How Versa Delivers AI-Driven NetOps with Explainability and Zero Trust<\/a> <em>(foundational, Versa-authored)<\/em><\/td>\n<td class=\"src\">Versa Networks<\/td>\n<td class=\"dt\">Sep 15, 2026<\/td>\n<\/tr>\n<\/table>\n<p>            <!-- Detailed write-ups --><\/p>\n<h2>Detailed write-ups<\/h2>\n<div class=\"article\">\n<h4>1. Buyers say yes to autonomy &mdash; and keep a hand on the approval button<\/h4>\n<p class=\"meta\">Network World &middot; Cisco Newsroom &middot; September 23, 2026<\/p>\n<p>The largest demand-side data point of the week is a survey of 1,000 IT and network operations leaders at organisations with 500 or more employees across North America, Western Europe and Asia-Pacific. It was fielded by <strong>Omdia<\/strong> and commissioned by <strong>Cisco<\/strong>, which published it as its own research release; Network World covered the same study with independent analyst voices. The headline numbers are strong: 80% say they are comfortable granting AI a &ldquo;high or fully autonomous role&rdquo; in network operations, 75% already use AI in some form for NetOps, 51% run agentic AI tools in production for real-time corrective action, and 84% expect a fully AI-led operating model within twelve months. For anyone selling into the enterprise NOC, that last figure reads as a buying window that is open now.<\/p>\n<p>The other half of the survey is where the product decisions sit. 56% still require human approval for AI actions. Only 24% are comfortable with no oversight at all, and 99% require guardrails before trusting agents. 82% accept AI making production changes without prior approval only in some categories of change, and 69% require detailed explainability. Put together, buyers are not asking for an autonomous network; they are asking for autonomy they can scope, inspect and revoke. The commercial opportunity is in defining which changes can run unattended and proving it &mdash; and the vendor that turns that into a default configuration rather than a consulting engagement shortens every sales cycle in the category.<\/p>\n<p>The spend driver is operational load, and the numbers are stark. The average organisation in the study generates 4,100 alerts a day, 51% of them network-related, and closes 46% of alerts without investigation. Mean incident resolution time is 88 hours, with a median of 12.5. 92% report issues spanning multiple domains, and 57% say their change processes cannot move at the speed required. And 95% say existing AIOps tools fall significantly short &mdash; a direct statement that incumbent tooling is up for replacement. Zeus Kerravala of <strong>ZK Research<\/strong> and Jim Frey, Chief Analyst, Network and IT Operations at Omdia, attribute the shift to rising network complexity and a shrinking pool of skilled staff. Kerravala put it bluntly: &ldquo;You have to have agentic operations. Networking pros will embrace it.&rdquo;<\/p>\n<p>The caution is who paid for it. This is a Cisco-commissioned study, and Cisco&rsquo;s release adds that 86% see an integrated platform as the most effective approach &mdash; a framing that favours a single-vendor stack and will be used that way in competitive deals. The same data carries the counter-argument for multi-vendor players: when 92% of organisations report incidents that cross domains, the platform that wins is the one that sees across all of them, whoever made the equipment. Expect the 80% to be quoted everywhere this quarter. The figures worth carrying into a board conversation are the 56% and the 99%, because they describe what buyers will actually sign.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.networkworld.com\/article\/4225341\/80-of-network-pros-are-ok-with-giving-ai-an-autonomous-role-in-network-operations.html\">Network World (80% of network pros are OK with giving AI an autonomous role in network operations)<\/a> &middot; <a href=\"https:\/\/newsroom.cisco.com\/c\/r\/newsroom\/en\/us\/a\/y2026\/m09\/cisco-ai-research-agenticops-scaling-quickly-in-the-enterprise.html\">Cisco Newsroom (Cisco AI Research: AgenticOps Scaling Quickly in the Enterprise)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>2. Extreme runs a channel offensive at Cisco and HPE while the Juniper integration settles<\/h4>\n<p class=\"meta\">CRN &middot; Channel Dive &middot; September 21&ndash;25, 2026<\/p>\n<p><strong>Extreme Networks<\/strong> used two CRN interviews in two days to make a single argument: it is taking share from Cisco and HPE, and it is doing it through partners. CEO Ed Meyercord says the volume of enterprise deals of $1 million or more is up 36% year over year in the channel funnel, with per-project deal size up a further 10%, and points to the 14% top-line growth claimed on the August earnings call as evidence of share gains. Roughly 90% of Extreme&rsquo;s business runs through the channel (Meyercord gave &ldquo;about 85 percent&rdquo; of revenue in an August CRN interview), and the company says it is moving upmarket into larger projects with larger customers on what it calls a &ldquo;micro-vertical&rdquo; approach. The product in the pitch is Extreme Platform ONE, generally available for roughly a year and positioned as a context-aware agentic AI platform &ldquo;out in front of&rdquo; rivals&rsquo; &ldquo;closed systems.&rdquo; In August, Meyercord put quarterly Platform ONE subscription bookings at close to $50 million against a $38 million estimate.<\/p>\n<p>Chief Commercial Officer Norman Rice supplied the mechanism. Extreme rebuilt its partner programme by hiring people who had built programmes at Juniper, HPE and Cisco and keeping only what was &ldquo;simple and good&rdquo; from each. The competitive play is explicit: Rice says the HPE and Juniper channels are &ldquo;very disrupted&rdquo; by the merger, and that &ldquo;there&rsquo;s a lot of confusion taking place about the [Cisco 360] program and we&rsquo;re capitalizing on that.&rdquo; The levers are margin protection, help managing fluctuating pricing, product availability and incentives tied to Platform ONE adoption. Rice also offered a useful adoption benchmark: moving customers from on-premises management to Extreme&rsquo;s cloud platform took about three years to reach critical mass, and Platform ONE is the next migration.<\/p>\n<p>HPE&rsquo;s move the same week shows the other side of that disruption. <strong>D&amp;H Distributing<\/strong> is now HPE&rsquo;s North American distributor for the HPE networking business, including the <strong>Juniper<\/strong> portfolio HPE acquired in July 2025. D&amp;H resellers can buy Juniper routers and switches from the end of September 2026 through D&amp;H&rsquo;s EPIC partner programme, which widens Juniper&rsquo;s route to market into D&amp;H&rsquo;s SMB and mid-market reseller base. D&amp;H says its HPE business grew &ldquo;well over 50 percent&rdquo; last year and is on a similar path this year &mdash; a figure for D&amp;H&rsquo;s HPE line, not Juniper&rsquo;s. No partner counts, revenue or AI-operations content were disclosed; this is channel consolidation, and it is the step that will either close the gap Extreme is targeting or confirm it.<\/p>\n<p>Two cautions. The &ldquo;what took Cisco six hours took Extreme six minutes&rdquo; headline is not new: it is a vendor-relayed, anonymous Fortune 100 customer anecdote that Meyercord has used since at least the January 2026 earnings call, not a measured result. And Extreme&rsquo;s growth figures are self-reported and inconsistent across interviews &mdash; 14% here, 13% fiscal-2026 growth in an August interview &mdash; with no third-party share data in either piece. The strategic signal survives the caveats: a challenger is using an agentic platform as a partner incentive and aiming it at the two incumbents mid-transition. For any vendor that sells through the same partners, the question is what those partners now earn on each platform.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.crn.com\/news\/networking\/2026\/what-took-cisco-six-hours-took-extreme-six-minutes-extreme-networks-ceo-details-ai-strategy-growth\">CRN (&lsquo;What Took Cisco Six Hours Took Extreme Six Minutes:&rsquo; Extreme Networks CEO Details AI Strategy, Growth)<\/a> &middot; <a href=\"https:\/\/www.crn.com\/news\/networking\/2026\/extreme-coo-channel-simplicity-ai-demand-fuel-market-share-gains-against-cisco-hpe\">CRN (Extreme CCO: Channel Simplicity, AI Demand Fuel Market Share Gains Against Cisco, HPE)<\/a> &middot; <a href=\"https:\/\/www.channeldive.com\/news\/dh-partners-gain-access-juniper-networks-portfolio-expanded-hpe-agreement\/831418\/\">Channel Dive (D&amp;H partners gain access to Juniper portfolio in expanded HPE agreement)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>3. Selector bets that customers will build their own agents &mdash; and govern them like software<\/h4>\n<p class=\"meta\">Network World &middot; September 23, 2026<\/p>\n<p><strong>Selector<\/strong> launched Foundry, a development and runtime environment inside its NetOps platform that lets network operations teams build, test, version and govern their own AI agents. The strategic bet is the important part: rather than shipping a fixed set of vendor-built agents, Selector is wagering that enterprise buyers want to own the agents that act on their networks. CEO Nitin Kumar framed it as a question of ownership: &ldquo;We called it Foundry for a specific reason: You can create things on your own because your data is yours, your workflows are yours.&rdquo;<\/p>\n<p>The governance model is borrowed from software engineering, and it is a direct answer to the trust gap the Omdia survey measured. Agents are committed to the customer&rsquo;s own repositories and changed through pull-request review. Before promotion, each agent is replayed against historical incidents and its conclusions compared with recorded outcomes; a failed promotion rolls back in one step. Two guardrail layers sit on top &mdash; cost and token limits on model calls, and content guardrails against hallucinated root causes &mdash; and staged production rollouts are built in. The first named use case is deliberately modest: triaging cloud outages, deciding whether an event is a real problem or planned maintenance, and filing the right ticket.<\/p>\n<p>Selector positions the customer-built model as its differentiator against <strong>Datadog<\/strong>, and says it will adopt standard agent-interoperability protocols. Kumar is explicit that full autonomy is the goal but not the near-term reality. No pricing, availability date, customer names or funding were disclosed, so this is a packaging and positioning signal rather than evidence of traction. The implication for the category is still worth weighing: if buyers come to expect that they can build and test their own agents, a vendor&rsquo;s advantage shifts away from the agents it ships and toward the data those agents reason over and the controls that prove they are safe. Replay against real incident history is the kind of evidence the 56% of buyers still demanding approval will ask to see.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.networkworld.com\/article\/4225614\/selector-brings-git-based-workflows-and-incident-replay-to-network-ai-agents.html\">Network World (Selector brings Git-based workflows and incident replay to network AI agents)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>4. The context layer becomes the product: NETSCOUT and IP Fabric sell to other vendors&rsquo; agents<\/h4>\n<p class=\"meta\">Business Wire (via FT Markets) &middot; Network World &middot; September 22&ndash;24, 2026<\/p>\n<p><strong>NETSCOUT<\/strong> added a built-in connection to its Omnis AI Insights solution that lets third-party AI assistants and agents pull its &ldquo;AI-ready Smart Data&rdquo; on demand while they work. The positioning is &ldquo;trusted network evidence&rdquo; as the input layer for other vendors&rsquo; agents: NETSCOUT is selling context, not the agent. It keeps its existing delivery alongside &mdash; Smart Data is already ingested by <strong>Splunk<\/strong>, ELK Stack, <strong>Datadog<\/strong>, <strong>ServiceNow<\/strong>, <strong>Dynatrace<\/strong> and others &mdash; which places NETSCOUT as a data supplier to the observability and IT-service-management platforms rather than a rival to them. The economic claim is that a &ldquo;compact, curated&rdquo; data set reduces hallucinations and &ldquo;high token spends&rdquo; compared with feeding agents raw telemetry. It is packaged as a licence-enabled capability on existing Omnis Sensors, with no price disclosed, and vertical templates for healthcare, financial services and telecommunications service providers. Phil Gray, AVP of Product Management, summed up the pitch: &ldquo;Everyone knows there is no value to conclusions that cannot be trusted.&rdquo; The &ldquo;trusted&rdquo; and &ldquo;ground truth&rdquo; language is marketing; the strategic choice underneath it is real.<\/p>\n<p><strong>IP Fabric<\/strong>, a direct competitor in network assurance and digital twins, made the same bet from a different starting point. Its 8.1 release repositions the product from a model of the network to what CEO Pavel Bykov calls a &ldquo;service-aware digital twin&rdquo; that maps application workloads to the network and cloud paths they depend on. The buyer problem it names is familiar in every large account: application and network data sit in separate silos across APM platforms, CMDBs and network tools, so operations teams cannot see what infrastructure an application depends on before they make a change. Cloud is modelled natively across AWS, Azure and Google Cloud, and IP Fabric&rsquo;s hosted service now gives AI agents verified application and cloud context through one interface. The dependency is worth noting: IP Fabric does not discover application data itself, but ingests inventory from partners &mdash; <strong>Illumio<\/strong> is first &mdash; or by import. No pricing, customer names or analyst validation were disclosed, and &ldquo;first&rdquo; is the vendor&rsquo;s own claim.<\/p>\n<p>Read together, two vendors in one week concluded that the defensible position in an agent-driven market is to be the source of truth that everyone else&rsquo;s agents query. That is a reasonable read of where the market is heading when Selector is betting on customer-built agents and Cisco is arguing for one integrated platform: if the agent itself is increasingly built by the customer or bundled by the incumbent, the independent vendor&rsquo;s leverage sits in the quality and openness of its context. The question it puts to every platform in this field is simple &mdash; whose agents query your data today, and on whose terms.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/markets.ft.com\/data\/announce\/detail?dockey=600-202609220700BIZWIRE_USPRX____20260922_BW711379-1\">Business Wire (via FT Markets) (NETSCOUT Adds MCP Connectivity, Putting AI-Ready Smart Data Directly Into the Hands of AI Assistants and Agents)<\/a> &middot; <a href=\"https:\/\/www.networkworld.com\/article\/4226178\/ip-fabric-8-1-adds-application-aware-mapping-and-cloud-native-data-model.html\">Network World (IP Fabric 8.1 adds application-aware mapping and cloud-native data model)<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>5. Nile&rsquo;s financial-services survey: a real pain point, measured by a vendor<\/h4>\n<p class=\"meta\">Business Wire &middot; September 23, 2026<\/p>\n<p>The headline &mdash; &ldquo;80% of Financial Institutions Struggle with Breach Containment&rdquo; &mdash; reads like independent research. It is not. The survey was issued by <strong>Nile<\/strong>, the secure network-as-a-service vendor, and covers 322 IT, security and risk professionals across banking, insurance, payments, capital markets and fintech. Methodology beyond the headcount was not disclosed, and the findings map directly onto Nile&rsquo;s pitch. Every figure below is Nile&rsquo;s.<\/p>\n<p>With that said, the pain it describes is specific. 80% of respondents struggle with breach containment and 57% experience network disruptions every month. Operations are overwhelmingly manual: 79.5% rely on manual threat intervention and 59.3% report a significant manual audit burden, while only 1.9% show advanced capability across five or more measures. 72.4% say they would consider secure network-as-a-service. The release frames economics, not only security, as the reason to redesign the network. Shashi Kiran, Nile&rsquo;s Chief Marketing Officer, tied it to the sector&rsquo;s regulatory exposure: &ldquo;Financial services run on trust, and trust increasingly depends on the network, especially when any disruption or security failure can quickly impact customers and raise regulatory concerns.&rdquo;<\/p>\n<p>Two readings for an executive. First, the 72.4% is willingness to consider, not intent to buy, and it sits against last week&rsquo;s evidence that NaaS adoption is 13% (Futurum Group) with the category in Gartner&rsquo;s trough of disillusionment &mdash; so treat it as a vendor&rsquo;s demand-generation number. Second, the manual-intervention and audit-burden figures describe exactly the compliance-automation case that every network automation vendor makes to financial-services buyers, and they rhyme with the Omdia finding that 46% of alerts are closed without investigation. The demand is real; the sample is small and the sponsor has a product to sell. Nile also named Srinivas Kavuri, formerly of Zscaler and Cisco, as Chief Development Officer this week.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.businesswire.com\/news\/home\/20260923407353\/en\/80-of-Financial-Institutions-Struggle-with-Breach-Containment-as-Network-Disruption-Rises-and-Costs-Climb\">Business Wire (80% of Financial Institutions Struggle with Breach Containment as Network Disruption Rises and Costs Climb)<\/a> &middot; <a href=\"https:\/\/www.businesswire.com\/news\/home\/20260924395373\/en\/Nile-Appoints-Srinivas-Kavuri-as-Chief-Development-Officer\">Business Wire (Nile Appoints Srinivas Kavuri as Chief Development Officer)<\/a><\/p>\n<\/p><\/div>\n<p>            <!-- Calls to action --><\/p>\n<div class=\"watchlist\">\n<h2>Calls to action<\/h2>\n<ul>\n<li><strong>Put the 56% next to the 80% in every customer-facing deck this quarter.<\/strong> The headline figure will be quoted at buyers all autumn. Pair it with the approval, oversight and guardrail figures from the same survey &mdash; 56%, 24% and 99% &mdash; and position the offer as the fastest safe route from supervised to autonomous, which is what the data says buyers will actually sign.<\/li>\n<li><strong>Write the multi-vendor answer to the &ldquo;integrated platform&rdquo; figure before it shows up in a deal.<\/strong> Cisco&rsquo;s release says 86% see an integrated platform as most effective. The same survey says 92% report issues spanning multiple domains and 95% say existing AIOps tools fall significantly short. Build the rebuttal from those two numbers, attributed to Omdia and Cisco.<\/li>\n<li><strong>Publish a default list of change categories that run without approval.<\/strong> 82% of buyers accept autonomous production changes only in some categories. Define those categories for a first deployment, attach the approval policy and rollback path to each, and make it the opening offer rather than a services negotiation.<\/li>\n<li><strong>Rebuild the business case on the survey&rsquo;s operating load.<\/strong> The average organisation in the Omdia study generates 4,100 alerts a day, 51% of them network-related, closes 46% without investigation, and takes a mean of 88 hours to resolve an incident. Those are buyer-reported numbers from a Cisco-commissioned study; used with attribution, they are a stronger cost-of-inaction case than any vendor benchmark.<\/li>\n<li><strong>Audit partner exposure to Extreme&rsquo;s offensive this month.<\/strong> Extreme is recruiting partners with margin protection, pricing help and Platform ONE incentives, and targeting channels disrupted by HPE&ndash;Juniper and the Cisco 360 changes. Identify which of your top partners also sell HPE, Juniper or Cisco, and check what they earn with you against what Extreme is offering.<\/li>\n<li><strong>Decide whether your data is the context other vendors&rsquo; agents query.<\/strong> NETSCOUT and IP Fabric both opened their data to third-party agents in the same week, and Selector is betting customers will build their own agents. Settle the position now: expose your network model to outside agents on your terms, or have a clear answer for why buyers should not want that.<\/li>\n<li><strong>Answer &ldquo;six hours versus six minutes&rdquo; with a measured, named reference.<\/strong> The line is a vendor-relayed, anonymous customer anecdote that Extreme has used since at least January. The effective counter is not a rival anecdote but one named Fortune 500 customer with an independently verified before-and-after figure.<\/li>\n<\/ul><\/div>\n<\/td>\n<\/tr>\n<p>        <!-- Footer --><\/p>\n<tr>\n<td class=\"footer\">\n<p class=\"brand\">Agentic NetOps<\/p>\n<p>A weekly intelligence bulletin from Security Radar LLC.<br \/>\n            Curated by Paul Davis &middot; <a href=\"mailto:paul.davis@security-radar.com\">paul.davis@security-radar.com<\/a><\/p>\n<p>&copy; 2026 Security Radar LLC. All rights reserved.<\/p>\n<p>Article titles and summaries are excerpted for review and commentary; all linked articles remain the copyright of their respective publishers and authors.<\/p>\n<p>*|LIST:ADDRESS|*<\/p>\n<p><a href=\"*|ARCHIVE|*\">View this email in your browser<\/a> &middot; <a href=\"*|UNSUB|*\">Unsubscribe<\/a><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>September 27, 2026 &middot; Weekly Edition Agentic NetOps Enterprise buyers said yes to autonomous network operations this week &mdash; with conditions. A Cisco-commissioned Omdia survey found 80% of network leaders comfortable giving AI an autonomous role, and 56% still requiring human approval. Extreme went after Cisco and HPE through the&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45,11],"tags":[],"class_list":["post-5949","post","type-post","status-publish","format-standard","hentry","category-ai-ml","category-trends"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5949","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5949"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5949\/revisions"}],"predecessor-version":[{"id":5987,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5949\/revisions\/5987"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5949"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}