Admin in the Loop: Firewalls and the Agentic SOC
Cisco, Thursday, October 8th, 2026
Cisco explains how Secure Firewall telemetry fed the multi-stage agentic SOC protecting 5,145 Splunk .conf26 attendees.
At Splunk .conf26 in Denver, Cisco ran a live SOC protecting more than 5,145 attendees from 70 countries around a multi-stage agentic pipeline.
Live telemetry fed Splunk Enterprise Security, autonomous agents handled Tier 1 triage, Cisco Cloud Control enforced confidence gates and human analysts made the response calls.
Firewalls running Secure Firewall 10 with Snort 3 and Encrypted Visibility Engine telemetry on SPAN feeds served as the stage-one signal engine, while Cloud Control unified on-premises and cloud-delivered FMC deployments with Unified Events.