Cisco restructured several certification tracks in early 2026, and the full pathway from entry level to expert now looks different from the version most guides still describe. If you are exploring Cisco training for the first time, or planning your next certification after several years in the field, this guide maps the complete 2026 pathway from CCNA through CCNP to CCIE, including the renamed Automation track and the new CCNP Cybersecurity track, and explains exactly what changed and when.
Cisco certifications remain one of the most widely recognised credentials in enterprise networking, since Cisco equipment underpins a large share of enterprise, government and service provider networks worldwide, and hiring managers use the certification as a fast, reliable signal of a candidate’s practical networking ability. The 2026 changes mean a roadmap written even twelve months ago is already out of date in places, particularly around naming and lab content, so this guide is current as of mid-2026 and structured so you can quickly find where you are, and where to go next.
The Cisco certification path in 2026
Cisco’s certification framework runs across four levels. Each level sits above the last, and most professionals move through them in order rather than skipping levels, though Cisco does not strictly enforce this with formal prerequisites at every step.
| Level | Certification | Typical tracks available |
|---|---|---|
| Entry | CCST (Cisco Certified Support Technician) | Networking, Cybersecurity |
| Associate | CCNA | Single unified exam (200-301) |
| Professional | CCNP | Enterprise, Security, Cybersecurity (new), Data Center, Collaboration, Automation (formerly DevNet) |
| Expert | CCIE | Enterprise Infrastructure, Security, Data Center, Collaboration, Wireless (returning), Automation |
Most engineers start at CCNA, specialise at CCNP in the track most relevant to their role, and move to CCIE only once they need to demonstrate expert level, lab tested skills in that same track. A smaller number of professionals also pursue narrower Specialist certifications alongside this core pathway, typically to demonstrate depth in a single product area such as a specific security platform or collaboration technology, without needing to sit a full CCNP or CCIE exam.
What changed in the February 2026 refresh
Cisco pushed a significant set of updates through its certification tracks in 2026. If you last checked the certification path before this year, the following changes affect what you will actually be studying and sitting for your exam:
- CCNA (200-301) was refreshed in February 2026 to add AI, automation and cloud networking content alongside the existing routing, switching and security fundamentals.
- CCNP Enterprise’s core exam, ENCOR, moved to version 2.0, adding SD-WAN multi-cloud content and 6GHz wireless (Wi-Fi 6E/7) coverage.
- CCIE Enterprise Infrastructure and CCIE Security lab exams added Crosswork Automation and Secure Firewall Threat Defense tasks from April 2026.
- CCNP and CCIE Wireless, previously retired, returned as active tracks on 19 March 2026, reflecting sustained enterprise demand for dedicated wireless expertise.
DevNet Associate, Professional and Expert were renamed to the Automation track (CCNA/CCNP/CCIE Automation). The exam content is largely unchanged; only the branding moved, aligning the track name with the skill it actually certifies rather than the developer-focused name Cisco used when it first launched the programme. See our separate explainer on the Cisco Automation track rename for a full old name to new name mapping if you already hold, or are partway through studying for, a DevNet-branded exam.
A new CCNP Cybersecurity track launched, sitting alongside the existing CCNP Security track rather than replacing it. See our dedicated CCNP Cybersecurity track guide for exam structure and how it differs from CCNP Security, since the two tracks overlap in places but are aimed at different roles.
Which certification should you start with?
If you are new to networking, CCNA is the right starting point regardless of your eventual specialisation. Every CCNP track assumes CCNA level foundations, even though CCNA is no longer a hard prerequisite for CCNP exams on paper. Skipping straight to a CCNP exam without CCNA level knowledge is technically possible but rarely a sensible use of exam fees, since the pass rate for candidates without solid fundamentals is low.
If you already hold CCNA and know which area you want to specialise in, whether that is security, data centre, collaboration, automation, or the new cybersecurity track, move to the matching CCNP exam next.
Choosing the right track matters more than choosing quickly: an engineer working primarily on firewalls and network security tooling will get far more career value from CCNP Security or CCNP Cybersecurity than from CCNP Enterprise, even though both are technically valid next steps from CCNA. CCIE is worth pursuing once you need to prove expert level, hands on skills for a specific role, typically a senior network architecture, escalation engineering, or principal engineer position.
Most candidates spend one to three years working at the CCNP level in a hands-on role before attempting CCIE, since the lab exam is scenario based and rewards real production experience far more than exam-only preparation.
Architecture: cloud fabric vs hardware concentrator
Traditional VPN architecture routes remote user traffic through an on-premises or data-centre-hosted gateway. All traffic — including SaaS application traffic destined for Microsoft 365, Salesforce, or similar platforms — travels from the user’s device to the VPN concentrator, through security inspection, and then out to the internet. This backhauling adds latency and creates a bottleneck when large numbers of users connect simultaneously, which became a well-documented problem during widespread remote work adoption.
Prisma Access processes traffic at the cloud PoP nearest to the user. Palo Alto Networks operates a globally distributed network of PoPs, meaning a user in Sydney connects to a Sydney-region PoP, not to a concentrator in a corporate data centre in another city or country. SaaS traffic exits directly from the PoP after inspection, rather than traversing the corporate network. Private application traffic reaches internal resources through service connections or ZTNA connectors, without granting users broad network access.
For enterprises with significant workforces across Australasia, SAARC, and the Americas, the PoP distribution of Prisma Access means consistent performance for users regardless of geography, without requiring investment in regional VPN concentrator infrastructure.
How long does it take to complete the full pathway?
Timelines vary by prior experience and study intensity, but as a general guide, CCNA typically takes three to six months of preparation for someone new to networking, assuming five to eight hours of study per week alongside full time work. CCNP exams usually take a further four to eight months on top of solid CCNA level knowledge, depending on the track and how much of the content overlaps with the candidate’s day job.
CCIE lab preparation is the largest step by a significant margin. Most candidates spend twelve to eighteen months preparing for the lab exam after achieving CCNP level knowledge, given the hands-on, scenario based format, and many candidates sit the lab more than once before passing. Taken together, a realistic timeline from a standing start to CCIE is roughly two to three years for someone progressing steadily around full time work.
Any course you book, whether self-study, virtual instructor-led, or in-person, should be mapped to the current exam version given how much the 2026 refresh changed.
Red Education’s Cisco training courses are updated in line with each Cisco blueprint release, including the February 2026 CCNA refresh, the ENCOR v2.0 update, and the new CCNP Cybersecurity and Automation track content.
Frequently Asked Questions
What is the Cisco certification path in 2026?
The 2026 Cisco certification path runs from CCST (entry) to CCNA (associate) to CCNP (professional, across Enterprise, Security, Cybersecurity, Data Center, Collaboration and Automation tracks) to CCIE (expert, across the same tracks plus the returning Wireless track). Most candidates progress through each level in order within their chosen specialisation, though formal prerequisites are lighter than the naming suggests.
What happened to Cisco DevNet certifications?
DevNet Associate, Professional and Expert were renamed to the Automation track (CCNA/CCNP/CCIE Automation) in 2026. The certifications themselves were not discontinued, only the name changed, so existing DevNet credentials remain valid and the exam content is largely the same.
How many levels are there in the Cisco certification pathway?
Four: entry (CCST), associate (CCNA), professional (CCNP, across multiple tracks) and expert (CCIE, across the same tracks). Cisco also offers a small number of specialist and architect level credentials above CCIE for select disciplines, for engineers who want to demonstrate depth beyond the core pathway.
Do I need CCNA before I can sit a CCNP exam?
No, Cisco does not enforce CCNA as a formal prerequisite for CCNP exams. In practice, however, CCNP exams assume CCNA level foundational knowledge, so most candidates complete CCNA first, and those who skip it typically need significantly more preparation time to close the gap.
What is the new CCNP Cybersecurity track?
CCNP Cybersecurity is a new professional level track introduced in 2026, sitting alongside the existing CCNP Security track rather than replacing it. See our dedicated CCNP Cybersecurity track guide for exam structure, prerequisites and how it differs from CCNP Security.
How long does it take to go from CCNA to CCIE?
Most candidates spend three to six months on CCNA, a further four to eight months per CCNP track, and twelve to eighteen months preparing for the CCIE lab exam, roughly two to three years in total for someone progressing steadily, though this varies significantly with prior experience, hands-on access to real equipment, and study intensity.
Is it worth pursuing CCIE if I already have several years of experience?
Yes, if your role or career goal requires demonstrated expert level skills, such as a senior architecture or escalation engineering position. CCIE is a lab-based, scenario-driven exam that rewards genuine production experience, so engineers with several years of hands-on Cisco experience are often better positioned to pass it than newer engineers who have only studied the material theoretically.