Cisco Systems: Networking, Security & AI Infrastructure

Cisco Systems headquarters (Building 10) in San Jose, California. Cisco provides the networking, security, and observability infrastructure that connects enterprises worldwide.

Cisco Systems, Inc. (NASDAQ: CSCO) is the world's largest networking equipment company, headquartered in San Jose, California, with approximately $56.7 billion in revenue (FY2025, fiscal year ending July 2025). Founded in 1984 by Leonard Bosack and Sandy Lerner — two Stanford University computer scientists who wanted to connect disparate campus networks — Cisco provides the routers, switches, firewalls, collaboration tools, and observability platforms that form the backbone of enterprise and service-provider networks worldwide.

In March 2024, Cisco completed its $28 billion acquisition of Splunk, the leader in security analytics and observability, transforming itself from a networking hardware company into a comprehensive networking, security, and AI infrastructure platform. This article explains Cisco's business model, networking moat, market position, the Splunk acquisition rationale, AI infrastructure opportunity, and key risks — without offering investment advice.

What Cisco Actually Does

Cisco provides the physical and software infrastructure that connects enterprises, data centers, and service providers. Its products and services span:

• Networking (Switching & Routing) — enterprise campus switches (Catalyst series), data center switches (Nexus), routers, wireless access points (Wi-Fi 6E/7), and cloud-managed networking (Meraki). Cisco's installed base of networking equipment is the largest in the world, connecting millions of enterprise sites.
• Security — firewalls (Cisco Secure Firewall), zero-trust access (Duo), extended detection and response (XDR), email security, and cloud security (Umbrella). Post-Splunk, security includes SIEM, SOAR, and threat intelligence at scale.
• Observability (Splunk) — log analytics, application performance monitoring (APM), infrastructure monitoring, and IT service intelligence. Splunk ingests machine data from across the enterprise to provide real-time visibility into security threats and operational issues.
• Collaboration — Webex video conferencing, calling, messaging, and contact center solutions. Cisco is a major enterprise unified communications provider.
• AI Infrastructure — Ethernet-based AI networking fabrics, Silicon One custom ASICs for 400G/800G switching, and AI-ready data center architectures. Cisco is positioning Ethernet as the networking layer for AI/ML training clusters alongside (and competing with) InfiniBand.

Revenue Structure (FY2025)

Key financial metrics (fiscal year ending July 2025):

• Total revenue: $56.7 billion (up 5% from $53.8B in FY2024; includes first full year of Splunk contribution)
• Networking: ~$28 billion (~50% of revenue) — switches, routers, wireless, and SD-WAN. The core franchise, though growth is cyclical.
• Security (incl. Splunk): ~$6 billion (~11%) — fastest-growing segment post-Splunk integration. Includes firewall, zero-trust, XDR, SIEM, and observability.
• Collaboration: ~$4 billion (~7%) — Webex suite, calling, contact center.
• Services: ~$15 billion (~27%) — technical support, advisory, managed services. High-margin recurring revenue stream.
• Annualized Recurring Revenue (ARR): >$30 billion — subscriptions and SaaS now represent >50% of total revenue, up from ~30% five years ago.
• Non-GAAP operating margin: ~34-36% — strong profitability despite hardware mix
• Employees: ~90,000 worldwide (including ~7,000 from Splunk)

Note: Cisco's fiscal year ends on the last Saturday of July. FY2025 includes the first full year of Splunk contribution. Segment reporting was restructured in FY2025 to reflect the Splunk integration; exact segment boundaries may differ from prior years.

The Networking Infrastructure Moat

Enterprise networking has structural characteristics that create durable competitive advantages:

• Massive installed base — Cisco has the largest installed base of networking equipment globally, with millions of switches, routers, and access points deployed across enterprises, governments, and service providers. This installed base generates recurring services revenue and creates natural upgrade cycles.
• Extreme switching costs — enterprise networks are built around Cisco's IOS/IOS-XE operating system, management tools (DNA Center/Catalyst Center), and certified architectures. Replacing Cisco requires retraining network engineers, re-certifying applications, and accepting migration risk. The CCNA/CCNP/CCIE certification ecosystem creates human capital lock-in.
• End-to-end portfolio breadth — no competitor matches Cisco's breadth across campus switching, data center switching, routing, wireless, SD-WAN, security, and collaboration. Enterprises prefer single-vendor architectures for interoperability and simplified management.
• Channel and partner ecosystem — Cisco sells through a vast network of VARs, system integrators, and managed service providers. These partners are trained, certified, and economically aligned with Cisco, creating distribution advantages that competitors cannot easily replicate.
• Services and support moat — Cisco's TAC (Technical Assistance Center) and SmartNet support contracts generate ~$15B annually in high-margin recurring revenue. Customers renew support because network downtime is catastrophically expensive.
• Standards influence — Cisco actively shapes networking standards (IEEE, IETF) and often implements features ahead of standardization, creating de facto standards that competitors must follow.

Key Product Families

Cisco's product portfolio spans the full enterprise networking stack:

• Catalyst Switches — the industry-standard enterprise campus switching platform. Catalyst 9000 series (9200/9300/9400/9500/9600) dominates enterprise LAN switching with ~50% market share.
• Nexus Data Center Switches — high-performance switches for data center fabrics. Nexus 9000 series supports VXLAN, ACI (Application Centric Infrastructure), and 400G/800G Ethernet for AI workloads.
• Meraki — cloud-managed networking (switches, wireless APs, security appliances, cameras). Popular with mid-market and distributed enterprises for simplicity and centralized management.
• Silicon One — Cisco's custom networking ASIC family, designed for routing and switching from 400G to 800G and beyond. Powers both Cisco's own platforms and is sold to hyperscalers and competitors as merchant silicon.
• Cisco Secure (Firewall, XDR, Zero Trust) — next-generation firewalls, Duo multi-factor authentication, SecureX/XDR platform, and Umbrella cloud security. Competing with Palo Alto Networks, Fortinet, and CrowdStrike.
• Splunk — SIEM (Security Information and Event Management), observability, log analytics, and IT operations intelligence. Processes petabytes of machine data daily for threat detection and operational visibility.
• Webex — enterprise video conferencing, calling, messaging, and contact center. Competing with Microsoft Teams, Zoom, and RingCentral.
• ThousandEyes — internet and cloud intelligence platform providing visibility into network performance across the internet, cloud providers, and SaaS applications.

Market Position

Cisco's competitive position across its markets:

• Enterprise switching: ~50% market share — dominant position in campus LAN switching (Catalyst) and strong in data center (Nexus). Primary competitors: Arista Networks (data center), Juniper/HPE (campus), Huawei (international).
• Enterprise routing: ~35-40% share — leadership in enterprise and service provider routing. Competitors: Juniper Networks, Nokia, Huawei.
• SD-WAN: leading position — Cisco Viptela/SD-WAN is among the top SD-WAN platforms. Competitors: VMware/Broadcom (VeloCloud), Fortinet, Palo Alto (Prisma).
• Security: top-5 vendor — Cisco is a major security vendor but faces intense competition from pure-play specialists. Post-Splunk, Cisco has a differentiated SIEM/observability position. Competitors: Palo Alto Networks, CrowdStrike, Fortinet, Microsoft.
• Observability (Splunk): market leader in SIEM — Splunk is the #1 SIEM platform by market share and a leader in log analytics. Competitors: Microsoft Sentinel, Elastic, Datadog.
• AI networking: emerging position — Cisco is investing heavily in Ethernet-based AI cluster networking as an alternative to NVIDIA InfiniBand. Silicon One ASICs and 800G switches target hyperscaler and enterprise AI deployments.

The Splunk Acquisition

In September 2023, Cisco announced the acquisition of Splunk for $28 billion in cash. The deal closed on March 18, 2024. Strategic rationale:

• Security + observability convergence — Splunk's SIEM and observability platform combined with Cisco's network telemetry creates a unique "see everything, secure everything" value proposition. Network data + endpoint data + log data = comprehensive threat detection.
• Recurring revenue acceleration — Splunk is ~95% recurring revenue (subscriptions + cloud). Adding ~$4B of high-quality recurring revenue accelerates Cisco's transition from hardware-centric to software/subscription model.
• AI/ML data platform — Splunk ingests and indexes massive volumes of machine data. This data platform becomes the foundation for AI-driven security analytics, predictive operations, and automated threat response.
• TAM expansion — Splunk serves security operations centers (SOCs), IT operations, and DevOps teams that Cisco historically did not reach directly. Combined addressable market expands significantly.
• Financial impact — Splunk contributed to FY2025 growth as Cisco completed its first full fiscal year with the business. Acquisition funded primarily with cash and debt. Cisco's balance sheet remains investment-grade with strong free cash flow generation.

AI Infrastructure Opportunity

Cisco is positioning itself as a critical infrastructure provider for AI data centers:

• Ethernet for AI — while NVIDIA InfiniBand dominates current AI training clusters, Cisco is betting that Ethernet (with enhancements like RoCEv2, RDMA, and Ultra Ethernet Consortium standards) will become the networking layer for next-generation AI infrastructure. Ethernet's openness, cost advantages, and existing operational expertise favor adoption at scale.
• Silicon One ASICs — Cisco's custom-designed networking chips deliver 400G/800G switching with industry-leading power efficiency. Silicon One is used in Cisco's own platforms and sold as merchant silicon to hyperscalers building custom network fabrics.
• AI-ready data center architectures — Cisco provides reference architectures for AI/ML training clusters using Nexus 9000 switches, lossless Ethernet fabrics, and congestion management optimized for GPU-to-GPU communication.
• Networking telemetry + AI — Cisco's visibility into network traffic (via ThousandEyes, Splunk, and embedded analytics) provides data for AI-driven network optimization, predictive maintenance, and automated security response.

Key Risks

• Hardware cyclicality — networking equipment revenue is cyclical, driven by enterprise IT budgets and refresh cycles. FY2024 saw a significant inventory digestion cycle after pandemic-era over-ordering, with product revenue declining ~10% before recovering in FY2025.
• Cloud/SD-WAN disruption — hyperscalers (AWS, Azure, GCP) build their own networking infrastructure and offer cloud-native networking services. As workloads move to cloud, some traditional on-premises networking spend shifts away from Cisco.
• Security competition — Cisco faces intense competition from pure-play security vendors (Palo Alto Networks, CrowdStrike, Fortinet) that are more focused and often faster to innovate. Cisco's security portfolio has historically been fragmented.
• Arista Networks in data center — Arista has taken significant data center switching share from Cisco, particularly in hyperscaler and large enterprise deployments. Arista's cloud-native EOS operating system is preferred by many cloud-first organizations.
• Splunk integration execution — integrating a $28B acquisition with different culture (software vs. hardware), go-to-market motion, and customer base carries meaningful execution risk. Customer retention and cross-sell execution are key variables.
• China/geopolitical risk — Cisco faces competition from Huawei in international markets and potential restrictions in China. Geopolitical tensions could limit Cisco's addressable market in certain regions.
• Margin pressure from subscription transition — shifting from upfront hardware sales to subscription/SaaS models temporarily pressures revenue recognition and margins during the transition period, even though long-term economics are favorable.

Investor-Education Context

• Cisco as "infrastructure toll road" — virtually every enterprise network in the world runs on Cisco equipment. As data traffic grows (driven by AI, video, IoT, cloud), the underlying network infrastructure must scale, driving upgrade cycles and new deployments.
• The subscription transition is structural — Cisco's shift from one-time hardware sales to recurring subscriptions (ARR >$30B) fundamentally changes the business model. Higher revenue visibility, better margins over time, and reduced cyclicality — but the transition takes years to fully reflect in financials.
• AI networking is the next growth vector — if Ethernet wins meaningful share of AI cluster networking (currently dominated by InfiniBand), Cisco is the primary beneficiary given its switching portfolio, Silicon One ASICs, and enterprise relationships.
• Splunk changes the competitive positioning — pre-Splunk, Cisco was primarily a networking hardware company with security as a secondary business. Post-Splunk, Cisco has a credible platform story combining network visibility + security analytics + observability.
• Capital return is significant — Cisco returns ~$12-14B annually to shareholders via dividends (~$7B) and buybacks (~$5-7B). The dividend yield (~3%) is among the highest in large-cap tech, reflecting the mature cash-flow profile.

This article is educational. It does not constitute investment advice, a recommendation to buy or sell, or a valuation opinion.

Sources

• Cisco FY2025 10-K (SEC EDGAR accession 0000858877-25-000111) — fiscal year ending July 26, 2025
• Cisco Q4 FY2025 and Full Year Results (August 2025) — revenue $56.7B, first full year with Splunk
• Cisco Q3 FY2025 Earnings Release (May 2025) — revenue $14.1B, ARR >$30B
• Cisco Completes Acquisition of Splunk (March 18, 2024) — $28B cash transaction
• Cisco Investor Relations — segment reporting, capital allocation, AI infrastructure strategy
• Cisco corporate website — product portfolio, AI networking solutions, Silicon One, security platform