Cisco IQ What's New

What's New

This document describes new features and enhancements released for Cisco IQ™. 

July 2026

July 24

Resilient Infrastructure Services

Resilient Infrastructure Services (RIS) is a flexible suite of support and professional services that helps you defend against and stay ahead of advanced AI-era threats. Powered by Cisco IQ's AI-driven insights, RIS gives your team always-on visibility into your exposure and personalized playbooks that speed up the detect-assess-respond cycle. It also provides expert guided workflow and automation to reduce or remove these risks from your environment.

• Cisco IQ RIS playbook experience: Step-by-step guidance that walks you through responding to threats and closing security gaps
• Device-level OS upgrades for compatible assets: Upgrade the operating system on compatible assets directly, keeping them current and secure

Quantum Safe Infrastructure

The Assessments module now evaluates your network environment against emerging post-quantum cryptographic standards, identifying vulnerabilities to quantum-enabled threats. By analyzing encryption usages for potential gaps, findings are prioritized by risk level to deliver actionable insights that strengthen your security posture and ensure long-term data integrity. Quantum Safe Infrastructure Assessment includes Cisco IOS® XE (excluding ASR 1000 and ISR 4000), IOS-XR, NX-OS, ACI, Cisco Secure Firewall Threat Defense (FTD), and Cisco Secure Firewall Adaptive Security Appliance (ASA).  The device cryptographic bill of materials (CBOM) feature is in beta.

Software Release Conformance

The Assessments module now enables you to evaluate conformance of the software that you are running across your asset inventory. It identifies any devices running software versions that are not a Cisco recommended version, and provides recommendation on the version to run. Key benefits include:

• Identifying the nearest Cisco suggested release for the version and features you are running on a specific device
• Viewing the percentage distribution of devices that aren’t on a Cisco recommended software version
• Accessing download links for recommended software versions, streamlining the remediation workflow for non-conformant devices

Cisco IQ APIs

The initial Cisco IQ API beta release is now live, enabling you to access Cisco IQ data without manually exporting it from the UI. The following REST APIs are supported:

• Assets inventory
• Contracts
• Lifecycle milestone data (end-of-sale, end-of-life, and last-date-of-support) for hardware and software where available
•  Security advisory assessments
•  Field notice assessments

Note: Cisco IQ APIs are in beta (public preview). Beta refers to the maturity of the APIs, not to limited availability. Explore them to evaluate upcoming integration capabilities and to share feedback. API behavior (including endpoint paths, request and response schemas, authentication, pagination, error handling, and other semantics) may change between releases without maintaining backward compatibility. Do not build production integrations against the beta APIs.

Peer Benchmarking

Peer Benchmarking provides contextual performance metrics by comparing an account's profile against benchmark data from groups of organizations within similar fields. You can review benchmark metrics within Cisco IQ to understand your standing relative to peers, identify areas for improvement, and take informed action.

Executive Reports

Cisco IQ now automatically generates Periodic Service Review (PSR) reports for Signature-level cases, available through Executive Reports. Each downloadable PDF report includes:

• An executive summary of support cases
• Key Performance Indicators (KPIs) for cases and Return Materials Authorization (RMA) analysis
• Software Maintenance Window (SMW) consumption and Service Level Agreement (SLA) analysis for entitled accounts only

PSR reports are stored for up to 12 months.

Expanded Language Options

Cisco IQ now supports English, Japanese, Korean, Mandarin, and Spanish across all modules and the AI Assistant, making Cisco IQ more accessible. Cisco IQ detects your language preference and displays the UI in that language, defaulting to English when the language is not yet supported. You can manually change your language by opening the User Menu and choosing a Language from the drop-down list.

Note: For some AI Assistant use cases, non-Latin and non-English responses may not yet be fully supported and responses may return in English.

Automatic De-duplication When Cloud Controller Telemetry and Direct Discovery Overlap

When a device is discovered by both cloud controller telemetry and a Direct Device Connection (DDC) method (seed file or IP range scan), Cisco IQ now automatically resolves the duplication. DDC takes precedence in overlap scenarios, and the duplicate entry is suppressed.

No configuration is required, and Inventory and Assessment data reflects the corrected records automatically.

Upload Asset Inventory via CSV File

Assets can now be added to Cisco IQ by uploading a CSV file, providing a path to inventory visibility for hardware that is not connected through a cloud controller or on-premises collector. The CSV must include each asset's serial number; software version, hostname, and location are optional. Uploaded assets are validated against Cisco's records and display in Assets > Inventory under a Customer Upload data source.

Services EA Summary: Growth Reporting

A new Services EA Summary page has been added to the Assets module. This page provides a view of install base growth sourced directly from Cisco's install base data, giving customers and Account teams a consistent, shared view of portfolio changes over time.

Manual Override of Asset Role and Importance Classifications

Cisco IQ automatically classifies entitled telemetry assets with a predicted Role (such as router or access switch) and Importance (its relative criticality within the network) based on telemetry data. These classifications influence risk scoring, AI Assistant responses, and Assessments prioritization. Account Administrators can now manually correct classifications when the automated prediction is inaccurate. Key features include:

• Inventory table: Role and Importance drop-downs are available on asset rows for individual or bulk edits. Manually overridden values are indicated with a visual marker.
• Asset details view: The same override controls display in the asset details panel, accompanied by an explanation of the telemetry attributes that informed the original prediction.

TLS Certificate Expiration

The Assessments module now enables you to monitor certificate health, view certificate details, and receive alerts on expiring certificates. It unifies and categorizes the expiration date for X.509 HTTPS and Transport Layer Security (TLS) certificates, as well as provides other certificate information to help with the certificate renewal process. The Findings by Assets view now includes per-device certificate counts and expiry information, helping you take timely action and prevent service disruptions.

Assessment Usability Enhancements

The Assessments module now includes enhanced Configuration and Security Hardening Assessments that provide contextual guidance for Inconclusive findings and updated categories applicable to configuration rules.

Rule Reference Link Enhancements

Rule reference links across assessment findings are now enhanced with a standardized format with descriptive labels and built-in URL validation to ensure links are well-formed and accessible, delivering a more consistent and reliable navigation experience to external documentation.

Additional Recommendation Guidance in Configuration and Security Hardening Assessments

Findings for IOS and IOS XE Signature devices now include Catalyst Center-specific generic recommendation guidance, alongside the existing CLI guidance.

Visualize and Filter Cases by Support Tier

Case list views now include a Support Tier column and filter, allowing you to isolate cases by contract level. The column is available on both the Cases and Your Cases pages, while filtering is only available on the Cases page. Available values include Basic, Standard, Signature, and Uncovered/Other for cases with no associated support contract.

See Attribution and Timestamps on Case Detail Views and Notes

The TAC progress details fields in a case’s detail view (for example, Problem Description, Current Status, Action Plan, and Resolution Summary) now display the author's name or an AI-generated tag alongside a date and time stamp. This is similarly applied in the Notes tab, making it clear whether content was written by a Cisco Engineer, a customer, or AI.

Search by RMA Number and Track RMA Drafts

RMA list views now support searching by RMA number, allowing you to further narrow search results. Additionally, the progress bar in RMA detail views now includes a Draft state, providing a more complete view of the RMA lifecycle.

Removal of the Default 90 Day Filter

RMA and Cases list views no longer apply the default “90 day” filter across the RMAs, Your RMAs, Cases, and Your Cases pages, allowing you to view your full RMA and case histories.

New Widgets and Case Trend Graph Chart

The Support Overview page now displays new widgets containing metrics for open cases and RMAs as well as a new Case Trend graph chart that displays case volume trends over time for opened and closed cases. New widgets include:

• Draft RMAs
• RMAs Pending Returns
• Cases Pending Customer Action

Note: The Case Trend graph chart is only available for Standard Level customers and above.

View RMA State and RMA Status Columns

RMA State and RMA Status are now available columns in the RMAs and Your RMAs pages, enabling you to more quickly identify which RMAs require follow-up action. The RMA State column is available on both the RMAs and Your RMAs pages, while the Return Status column is only available on the RMAs page.

Submit Direct Feedback from the Help Menu

The new Report an Issue option in the Cisco IQ Help Menu opens a modal in Cisco IQ for submitting feedback or reporting issues, enabling you to report problems directly. Additionally, Help Menu items are reordered to improve discoverability.

Note: Only use Report an Issue for Cisco IQ issues; you must open a Technical Assistance Center (TAC) case for end-device issues.

Actionable Insights in Case List Views

The Cases and Your Cases list views now display a dynamic Insights banner above the case lists, presenting 2–3 prioritized, actionable observations about your current case portfolio, helping you prioritize next actions at a glance.

AI Assistant File Upload Support

You can now upload the following supported file formats directly into AI Assistant troubleshooting conversations for AI-powered analysis, summaries, and insights, removing the need to manually enter data or file contents:

• Text files (.txt)
• Spreadsheet files (.xls, .csv)
• Presentation files (.ppt)
• Image files (.jpg)
• Document files (.pdf)
• Compressed files (.zip, .rar, .7z, .gz, .tar)

Note: Uploads are limited to 100 MB per file and 500 MB per thread.

Device-Level Self-Service Troubleshooting

Standard and Signature Level capabilities now provide you the ability to troubleshoot with the AI Assistant at the device level, providing tailored diagnostics and enabling comprehensive root cause analysis beyond general troubleshooting guidance for devices connected through file uploads.

Ask About Cisco IQ Features and Use Cases

The AI Assistant can now answer general questions about Cisco IQ's features, modules, and use cases as well as where to find documentation and how to contact support, reducing the need to search external resources for basic product questions.

---

June 2026

June 15

Enhanced Contract Data Availability

Previously, newly added Service Contract data could take up to 24 hours to display. Cisco IQ™ now populates Inventory within one (1) hour of adding a contract, enabling you to quickly access contract details, asset-specific insights, and act on upcoming product lifecycle milestones.

Note: Service Contracts with exceptionally large device inventories (such as those spanning tens of thousands of devices) may require additional time to process.

June 12

Your Reports

The Your Reports page provides a centralized location to save and manage your AI-generated analysis reports. Reports can be captured from various entry points, including the AI Assistant, inline messages, and full analysis views across Cisco IQ.

Key capabilities include:

• Snapshot Management: Efficiently browse report history and switch between snapshots
• Export and Cleanup: Download reports as PDFs or manage your library by deleting reports individually or in bulk
• Improved Error Handling: Receive clear, informative guidance for permission, session, or loading issues

Customizing Reports

The Customization feature within the AI Assistant enables you to tailor AI-generated analysis reports to your specific needs directly from a report view. You can modify report layouts and content using the following capabilities:

• Reorder widgets: Drag and drop charts, tables, and insights to rearrange the report layout
• Remove widgets: Exclude specific charts, tables, or insights to focus on the data that matters most
• AI-assisted edits: Use natural language prompts to request specific modifications to titles, descriptions, and key insights
• Suggested prompts: Leverage a library of categorized, AI-generated suggestions to guide your customizations

---

April 2026

Assets Application

The Assets application delivers comprehensive visibility and management capabilities for Cisco assets and serves as the foundation of Cisco IQ, providing a centralized listing of all devices within an organization. By collecting information from multiple sources, it acts as a single source of truth for device inventory.

Asset Criticality Insights

Cisco IQ provides Asset Criticality Insights, which enables the Assets application to predict the functional role and business importance of network devices. By analyzing device configurations and enabled features, Asset Criticality Insights helps you identify which assets have the greatest impact on your network, allowing you to prioritize them for security remediation, software upgrades, end-of-life/end-of-support planning, and coverage decisions.

Service Contracts

The Service Contracts page provides centralized oversight of support contracts. Key features include:

• Service Contract Oversight: Streamline renewal planning and coverage strategies with comprehensive contract summaries and detailed data

• Asset-Specific Insights: Identify and mitigate vulnerabilities faster with clear, actionable data linked directly to your assets

• AI-Powered Operations: Leverage the AI Assistant for risk management, case support, and real-time troubleshooting

LDOS Dashboard

The Last Date of Support (LDOS) Dashboard provides a centralized view of LDOS milestones and allows for improved asset planning and budget forecasting before hardware or software reaches end-of-life, enabling you to significantly reduce operational risk.

Asset Tagging

The Assets application supports tagging assets, providing a flexible way to organize, filter, and act on your inventory using custom labels. Tags can be created, modified, and assigned to assets, with centralized tag management available for Administrators. You can assign tags to individual assets or in bulk, as well as filter your inventory by tag to quickly locate desired assets.

Assessments Application

The Assessments application provides visibility into your inventory by evaluating your organization’s assets and offers a framework that enables you to proactively investigate and mitigate risks related to security, stability, capacity, compliance, and aging, helping keep networks secure.

Security Advisories

The Assessments application enables you to stay ahead of potential threats with integrated Security Advisories. The system proactively surfaces relevant vulnerabilities, ensuring you are informed of critical updates and can take immediate action to protect your network.

Security Hardening

The Assessments application provides automated, real-time visibility into the security posture of your network infrastructure by continuously evaluating your assets against Cisco OS Hardening Guides. It detects configuration deviations across your infrastructure that may affect security posture or risk exposure. Each security hardening rule is evaluated across your covered assets, with findings prioritized by severity to help you address security gaps, enhance resilience, and reduce operational risk.

Configuration

The Assessments application evaluates your assets against recommended best practices based on Cisco’s proven expertise. It detects configuration deviations across your infrastructure that may affect availability, security, or performance. Each best practice rule is evaluated across your covered assets with findings prioritized by severity helping you to ensure configuration consistency, enhanced resilience, and reduced operational risk.

Field Notices

The Assessments application provides timely, proactive notifications regarding hardware and software updates. By surfacing relevant Field Notices directly within the Assessment dashboard, this feature enables you to address potential issues before they impact your operations.

Support Application

The Support application offers a consolidated view of customer support cases, providing visibility into both open and closed cases you are entitled to access.

Case Reporting

An interactive dashboard that provides a centralized, visual summary of cases is available in the Support application on the Overview page, helping you quickly assess case status and severity. The interactive graphs enable direct navigation to a filtered case list, reducing the time spent searching for relevant cases.

Case Lists

The following types of case list views are available in the Support application:

• Account Cases: The Cases page displays a consolidated list of all cases associated with the contracts in your Cisco IQ account, enabling common case actions and insights directly from a single interactive view

• Your Cases: The Your Cases page displays a consolidated list of cases you are entitled to view and manage, providing a personalized view that makes it easier to focus on relevant cases, complete common actions, and gather insights

Both list views contain configurable columns and filters that persist across sessions and logins, providing a consistent and customized experience.

Communication Preference Management

Communication preferences are available in the Support application from a case’s detail view, improving the overall support experience. You can configure how and when you are contacted, enable notifications for individual cases, and specify the email addresses that receive the case notifications.

Case Notes Management

Case notes are available in the Support application from a case’s detail view, providing a consolidated record of case updates that are documented and easily referenced in one place. You can record, communicate, and review case updates and decisions whether they were submitted by a customer or a Cisco Engineer.

File and Attachment Management

Case file management is available in the Support application from a case’s detail view, allowing you to securely attach and maintain supporting documents directly within a case.

Associated Bugs List

A case’s associated bugs are available in the Support application from a case’s detail view. Clicking a bug opens the corresponding record in Cisco.com’s Bug Search Tool, providing immediate visibility into known product issues related to your case.

Associated RMAs

A case’s associated Return Material Authorizations (RMAs) are available in the Support application from a case’s detail view, providing a centralized way to track replacement activity, shipment status, and logistics actions related to a case.

RMA Lists

The following RMA list views are available in the Support application:

• RMAs: The RMAs page displays a consolidated list of all RMAs associated with the cases in your Cisco IQ account, enabling you to monitor, analyze, and act on all hardware replacement activity directly from a centralized list

• Your RMAs: The Your RMAs page displays a consolidated list of RMAs that you have the necessary entitlements to view and manage, providing a personalized view to help you focus on relevant hardware replacement activity

AI Assistant

The AI Assistant elevates the usage of Cisco IQ by transforming raw data into actionable insights, recommendations, and guided actions. It integrates with existing tools where it leverages individual data sources and synthesizes intelligence across multiple data streams to deliver real-time suggestions.

Free Text (Conversational AI)

The AI Assistant supports Free Text, providing the foundational capabilities for a true conversational AI experience within Cisco IQ, allowing you to interact with data using a Natural Language Processing (NLP) model and making the interface more accessible and intuitive.

Contextual AI Assistant

The contextual AI Assistant ensures dynamic context, providing seamless support across global applications and individual assets with consistent user-level context. You can effortlessly switch between assets and maintain the session state. It integrates directly with Cisco IQ, providing instant access to critical asset data, including telemetry, support contracts, asset host names, asset IP addresses, and product IDs.

Prompt Categorization

The AI Assistant provides prompts arranged in a categorized manner to streamline your workflow and help you quickly locate the assistance you need. The prompts are organized into the following categories:

• Assets (General): Prompts related to asset lifecycle, including LDOS and general inventory queries

• Troubleshooting: Prompts to assist with error syslog messages or configuration questions

• Cases: Prompts to support case management actions such as viewing, updating, escalating, and closing cases, enabling efficient tracking and communication with Cisco support resources

• Asset Criticality: Prompts related to prioritizing assets for risk mitigation activities based on their role and importance within the network

• Assessments – Configuration: Prompts related to summarizing configuration assessment results, identifying configuration deviations against recommended best practices, and generating actionable recommendations

• Assessments – Security Hardening: Prompts related to identifying recommended security baseline configurations, best practices for device hardening, and step-by-step procedures for securing Cisco network infrastructure

• Assessments – Security Advisories: Prompts related to identifying recommended security baseline configurations, best practices for device hardening, and step-by-step procedures for securing Cisco network infrastructure

Note: Basic tier support levels have access to the AI Assistant's Assets (General), Troubleshooting, Cases, and Assessments – Security Advisories prompt libraries.

LDOS Summarization

The Assets prompt library in the AI Assistant contains multiple prompts that can help with LDOS. The Summarization and Prioritization feature enables you to quickly identify and address risks associated with network assets.

Fast Track Case Resolution

The Cases prompt library in the AI Assistant contains cases prompts that allow you to view and track support cases, making it easier to manage and quickly resolve issues by checking case statuses, review updates, follow progress, and stay up-to-date on next steps.

Troubleshooting with the AI Assistant

Cisco IQ has an AI-powered Troubleshooting feature empowering you to resolve device issues independently. This intuitive assistant leverages Cisco’s certified troubleshooting tools and a comprehensive, proven knowledge base. With this feature, challenges can be quickly resolved, maintaining optimal performance, and reducing the need to open a support case. This functionality is available for the following areas:

• Service Provider

• Enterprise Networking

• Data Center