Cisco Application Policy Infrastructure Controller Enterprise Module

Simplify Network Configuration and Provisioning

The Cisco Application Policy Infrastructure Controller Enterprise Module (APIC EM) extends Application Centric Infrastructure (ACI) to the WAN and access edge. ACI is a holistic architecture for centralized automation of policy-based application profiles. Through programmability, automated network control helps IT rapidly respond to new business opportunities. APIC EM will be available soon for customers and developers to download at no additional charge using a free membership to the Cisco DevNet community.

Watch a video demonstration of how the APIC Enterprise Module automates security provisioning and ACL management and simplifies QoS management and WAN path optimization.

Set Up a Programmable Network

Enable Rapid Innovation

Cisco experts show you how the APIC EM could change your future. (5:32 min)

Watch Video
Amplify Network Intelligence

Amplify Network Intelligence

See how the controller increases business innovation and agility. (4:04 min)

Watch Video

Features and Capabilities

The Cisco APIC Enterprise Module and its applications are a part of the Cisco ONE Platform software portfolio. The controller offers customers a low-risk, incremental approach to adopting software-defined networking (SDN) technologies in their branch and campus environments.

Supporting existing infrastructure, the controller offers industry-leading investment protection along with innovation. Using an application-centric approach, the controller automates the provisioning of the entire end-to-end infrastructure to rapidly deploy applications and services.


  • Software that runs on any x86 server, offered as software or an appliance
  • An advanced GUI with no programming skills required
  • Integrated analytics, policy, and network abstraction


Massively simplified configuration and provisioning

The controller automates the deployment and compliance checking of network policies across the entire end-to-end network.

Investment protection

The controller works with the existing network infrastructure so there is no need to do a complete infrastructure replacement. No new network hardware is needed.

Openness, programmability, and customization

Based on the OpenDaylight Controller architecture, the controller is highly programmable through open APIs (representational state transfer [RESTful] and OSGi APIs). It can enable independent and third-party software developers to create innovative network services and applications to fuel enterprise business growth.

Business policy to network configuration

The controller auto-translates business policy into network device-level policy and can enable policy enforcement across an end-to-end network.



The Cisco APIC Enterprise Module automates the deployment and compliance checking of network policies across the entire end-to-end network for superior threat detection and remediation.

Customers also gain efficient change management of access control lists (ACLs). The controller's ACL applications include automating policy compliance checking, troubleshooting ACL configurations, and user-based ACL policy deployment in Cisco Identity Services Engine (ISE).

Quality of service (QoS)

The controller's QoS applications include automating network-wide QoS compliance checking and user-based QoS policy deployment. QoS deployment and change management across the entire enterprise network is facilitated through an advanced GUI.

WAN path optimization

The controller's Intelligent WAN (IWAN) application automates the configuration of IWAN and Performance Routing (PfR) on Cisco Integrated Service Routers.

Related Products

Set Up a Programmable Network

Set Up a Programmable Network

Learn how APIC Enterprise Module helps Continental AG meet its IT demands. (8:02 min)

Watch Video
Adapt to Rapid Network Changes

Adapt to Rapid Network Changes

See how APIC-EM helps Lufthansa optimize quality of service on demand. (02:34)

View Video

Additional Resources

Let Us Help