Pairs with the Moat Anatomy Canvas — a ready-to-use strategy tool. Included with a subscription, or $1.99.
Walk into almost any corporate network closet and you will find a stack of Cisco boxes blinking away - and somewhere nearby, the person who configured them learned to do it on a Cisco command line, studying for a Cisco exam, possibly trained in a Cisco-sponsored classroom. That is not an accident. Since 1997, Cisco's Networking Academy has run more than 28 million learners through its courses in 195 countries.5 The company didn't just sell the routers. It trained the entire profession that buys them.
The official story is that this makes Cisco's networking business an unassailable fortress - the deepest moat in enterprise tech, half the world's switches and a generation of engineers who think in its syntax. That story is half true and getting more dangerous by the quarter, because the same Cisco that still dominates the office wiring closet has been quietly losing the most important new market in networking, and its famous moat does nothing to stop it.
How training the buyer becomes the moat
Most moats are built on the supply side - a patent, a chip you can't copy, a cost no rival can match. Cisco's best moat is on the demand side, and it runs through human beings. A network engineer climbs a certification ladder that ends, for fewer than three percent of the certified, at the legendary CCIE - a credential launched in 1993 that requires recertification every three years and an ever-issued population estimated at only 60,000 to 69,000 worldwide.6 Every rung of that ladder teaches the candidate to design and troubleshoot networks the Cisco way. Then that engineer goes to work, and when it's time to buy gear, they specify what they know. Switching vendors doesn't just mean buying new boxes; it means retraining the people who keep the network alive at 3 a.m.
The flywheel runs on familiarity. The more engineers Cisco certifies, the more buyers default to Cisco; the more buyers default to Cisco, the more engineers seek Cisco certs to stay employable. Of FY2025 students completing certification-aligned courses, 97% said the training helped them land a career or educational opportunity.5 That is the loop closing in real time - Cisco's curriculum becoming the path to a paycheck, and the paycheck running on Cisco gear. The genius is that the cost of switching isn't billed to Cisco. It's billed to the customer's own staff.
And in its home arena, the moat holds. Cisco still owns the enterprise campus and branch - the switching that wires office buildings, where its share generally sits in the 40-to-48% range, with rivals chasing as a distant second.4 In enterprise routing it is more dominant still; even in the most recent data, its total router revenue grew 22.5% year over year, giving it a 30.6% share of that market.3 This is exactly where the certification flywheel bites hardest: thousands of certified humans, configuring boxes by hand, in environments that change slowly. The defended ground is real.
The arena where the certified engineers don't decide
Now look at the number that breaks the fortress story. In the overall Ethernet switch market, Cisco's share fell from 47.2% in the second quarter of 20239 to 34.8% a year later11 - and then to 27.6% by the fourth quarter of 2025, on revenues of $4.5 billion.3 That is not a wobble. That is a near-halving of share in roughly two years. And it happened in the one segment the certification moat can't reach: the AI data center.
| Enterprise campus & branch | AI data center switching | |
|---|---|---|
| Who picks the gear | Cisco-certified engineers | Hyperscaler platform teams |
| What the moat is | Trained humans, slow change | Raw fabric performance |
| Cisco's position | ~40-48% share, still leads | Share collapsing toward ~28% |
| The disruptors | A distant #2 | Arista + NVIDIA Spectrum-X |
Here is the mechanism the fortress story misses. The certification flywheel protects Cisco wherever a certified human is the one choosing the network. But the buyers of AI infrastructure are not those humans. Hyperscalers and AI cloud builders run their own platform engineering teams, often deploy white-box hardware, and don't care that a CCIE knows the Cisco command line - because no CCIE is configuring the fabric one box at a time. The customer who wires an AI cluster isn't shopping for a switch a certified engineer will love. They're shopping for the fastest, most automatable fabric to feed thousands of GPUs - and they'll buy it from whoever wins the benchmark.
Which is precisely what happened. In the fourth quarter of 2023, Arista took the data-center Ethernet switch revenue crown from Cisco for the first time ever, riding hyperscaler AI wins - and roughly 90% of Arista's switch revenue is data-center-derived, meaning it is purpose-built for exactly the arena Cisco is bleeding in.7 Then came a disruptor that no pre-2024 analysis of Cisco's moat even contemplated: NVIDIA, which by the third quarter of 2025 had seized 11.6% of the data-center Ethernet switch segment with its Spectrum-X platform - by bundling the switching silicon with the very GPU clusters the network exists to serve.10 When the company selling the GPUs also sells the network, a certification in someone else's command line is worth nothing.
Cisco's certification flywheel is one of the strongest demand-side moats ever built - but it protects only the territory where the people it trained are the ones making the purchase. The moment the buyer changes - from a certified network engineer to a hyperscaler platform team buying a GPU-plus-fabric bundle - the moat doesn't shrink, it simply isn't there. Before you call a moat 'unassailable,' ask whose hands it actually constrains. If a new, faster-growing buyer enters who was never bound by your switching cost, your fortress and their battlefield are two different places that happen to share a name.
Isn't Cisco still the giant with the recurring revenue machine?
The fair objection is that this reads too gloomy. Cisco is still enormous, and it has spent years rebuilding the business around software and subscriptions, not boxes. Its FY2024 software subscription revenue hit $16.4 billion, up 15% and now 89% of all software revenue, with total annual recurring revenue of $29.6 billion, up 22%, and $28.5 billion of deferred revenue sitting on the balance sheet.2 That is a different, stickier kind of moat - and it's real. A switch you bought is a one-time sale; a subscription you renew is a relationship.
But notice what that pivot quietly concedes. Cisco's FY2024 total revenue was $53.8 billion - a 6% decline year over year, with product revenue down 9% and net income off 18%.1 The recurring-revenue story is partly the story of a company whose hardware engine stalled, leaning on software to hold the line. The certification moat and the subscription moat both defend the installed base Cisco already has. Neither one wins the buildout that is reshaping the entire industry. You can run a beautiful annuity on the networks of the past while losing the networks of the future, and for a while the income statement will let you pretend those are the same fight.
Cisco didn't lose its moat. It discovered that its moat has an address. The trained engineers, the CCIE ladder, the 28 million learners - that machinery still guards the enterprise campus with terrifying efficiency, and it isn't going anywhere soon. But the AI data center was built by people Cisco never enrolled, choosing fabrics Cisco never taught, from vendors who sell the network as an accessory to the chip. The most durable moat in networking turned out to be exactly as deep as the curriculum that fed it - and the future bought its hardware without taking the course.
Moat Anatomy Canvas
A one-page canvas that dissects a moat instead of asserting it: where the advantage comes from, how much of the market it covers, how long it would take to copy, and what keeps it from eroding. Blank to dissect your own claimed edge; filled as the worked example tracing the structure of the story's defensible advantage. Use it to tell a real moat from a head start.
Included with any subscription, or unlock this tool for $1.99. Get it → · See plans →
Sources
Where this comes from — the filings, records, and reporting behind it.
- 1Cisco FY2024 total revenue was $53.8 billion, a decrease of 6% year-over-year; product revenue declined 9%; GAAP net income was $10.3 billion, down 18%. Splunk contributed ~$1.4B of that total.
- 2Cisco FY2024 10-K (SEC filing): deferred revenue was $28.5 billion as of July 27, 2024; total ARR was $29.6 billion (including $4.3B from Splunk), up 22% YoY; software subscription revenue was $16.4 billion, up 15% YoY, representing 89% of total software revenue.
- 3Cisco's Ethernet switch market share fell from 47.1% in Q2 2023 to 34.8% in Q2 2024 (IDC). By Q4 2025, Cisco's Ethernet switch share was 27.6% with revenues of $4.5 billion, while its total router revenue grew 22.5% YoY giving it 30.6% router market share.
- 4In the enterprise router segment, Cisco is the dominant player by some distance; in enterprise switching, Cisco's share is usually in the 40–48% range (varying by quarter), with Arista as the clear and rapidly growing #2. (Synergy Research Group, cited by Network World, Jan 2025.)
- 5Cisco Networking Academy has reached over 28 million learners in 195 countries since its 1997 founding. As of FY2025, 97% of students completing certification-aligned courses say it helped them obtain a career or educational opportunity.
- 6The CCIE certification, launched in 1993, has a total ever-issued population estimated at ~60,000–69,000 (various industry estimates). Cisco does not publish a real-time active count. Fewer than 3% of Cisco-certified individuals attain CCIE; recertification is required every three years.
- 7Arista stole the data-center Ethernet switch vendor revenue crown from Cisco for at least one quarter (Q4 2023), the first time ever, driven by hyperscaler AI buildout wins. Arista's Ethernet switch revenue is ~90% datacenter-derived.
- 8NVIDIA's Spectrum-X platform seized an estimated 11.6% of the data-center Ethernet switch market by late 2025, bundling switching ASICs with GPU clusters to vertically integrate the AI fabric stack — a disruptor not present in pre-2024 competitive analyses of Cisco's moat.
- 9Cisco's Ethernet switch revenues gave the company a market share of 47.2% in Q2 2023 (total worldwide Ethernet switch market, IDC Worldwide Quarterly Ethernet Switch Tracker)
- 10NVIDIA held 11.6% share of the datacenter Ethernet switch segment in Q3 2025, per IDC Worldwide Quarterly Ethernet Switch Tracker
- 11Cisco's total Ethernet switch share stood at 34.8% in Q2 2024, down from 47.1% in Q2 2023 (IDC Worldwide Quarterly Ethernet Switch Tracker, Q2 2024)