Cisco ELA Guide 2026: Structure, Portfolios, True Forward and Negotiation Strategies

What Is the Cisco Enterprise Agreement?

Cisco's Enterprise Agreement (EA) locks enterprise buyers into commitments across six product portfolios — Networking, Collaboration, Security, Applications, Provider Connectivity, and Services — with True Forward billing that projects unused entitlements forward across remaining contract term. For organisations purchasing more than $500,000 annually across Cisco's product range, the EA consolidates software licences, SaaS subscriptions, and support services into a single master agreement with a unified renewal date and access to multi-suite discounts unavailable on individual product transactions.

For buyers, the EA offers real advantages: simplified invoice management, growth allowance provisions that permit organic headcount expansion without triggering immediate additional charges, and access to Cisco's broadest discount tiers. But the EA also introduces structural risks that buyers who focus solely on the headline discount routinely underestimate. The True Forward billing mechanism, the obligation to cover all knowledge workers in certain portfolios, and the long-term lock-in of Cisco's pricing and product decisions over a three-to-five year period are all material considerations that deserve as much attention as the commercial terms being negotiated.

ELA Eligibility and Minimum Thresholds

Any enterprise organisation meeting the minimum total contract value of $100,000 can qualify for a Cisco EA. In practice, most EA conversations begin when the annual Cisco spend across all product categories exceeds $400,000 to $500,000, because the administrative benefits of the EA structure are most tangible at that spend level. Smaller organisations below this threshold often find that the operational overhead of EA management outweighs the consolidation benefits relative to standard tier pricing available on direct product purchases.

The EA is available through Cisco reseller partners as well as directly from Cisco. Partner-sourced EAs are the most common structure for mid-market and upper mid-market buyers, as the reseller often provides additional service value, implementation support, and advisory capacity as part of the overall commercial relationship.

The Six ELA Portfolios

The Cisco EA is organised around six portfolios, each covering a distinct segment of Cisco's product range. An organisation does not need to include all six portfolios in its EA — the commercial framework allows buyers to select the portfolios relevant to their current Cisco footprint and add additional portfolios at renewal or via contract amendment.

Portfolio 1: Networking Infrastructure

The Networking Infrastructure portfolio covers software for campus switching, wireless networking, SD-WAN, and routing, including Catalyst Centre (formerly DNA Center), Meraki cloud management, and Cisco networking subscriptions. This is the most commonly included portfolio in enterprise EAs because switching and wireless infrastructure represents the broadest deployed Cisco footprint in most organisations.

Key products covered include Cisco Catalyst switching software subscriptions, Cisco Meraki dashboard licences (including MS switching, MX security appliances, and MR wireless), Catalyst Centre Essentials, Advantage, and Premier tier management licences, SD-WAN software, and ThousandEyes network intelligence. The portfolio is priced on a per-device basis for on-premises hardware and a per-device or per-site basis for Meraki cloud-managed infrastructure.

Portfolio 2: Collaboration

The Collaboration portfolio covers unified communications, video conferencing, and collaboration tools. Under the EA, this portfolio operates through the Collaboration Flex Plan 3.0 framework, with the EA buying model covering all Knowledge Workers in the organisation. Key products include Webex Calling, Webex Meetings, Webex Suite, Cisco Unified Communications Manager (CUCM) for on-premises deployments, and Webex Contact Center for organisations with customer service requirements.

The Collaboration portfolio applies a 15 percent growth allowance at the suite level. An organisation that commits to 5,000 Knowledge Workers can add up to 750 additional users without triggering True Forward billing. Consumption beyond that 15 percent threshold is subject to True Forward adjustment at the annual measurement date.

Portfolio 3: Security

The Security portfolio covers Cisco's network security, endpoint security, identity management, and SecOps product lines. Key products include Cisco Secure Firewall (Firepower), Cisco Secure Endpoint (formerly AMP), Cisco Secure Email Gateway, Cisco Identity Services Engine (ISE), Cisco Duo Security (multi-factor authentication), Cisco Umbrella (cloud-delivered DNS security), and Cisco SecureX or XDR platform integration.

The Security portfolio also carries a 15 percent growth allowance for user-based entitlements. This is significant because Cisco's security products have been aggressively priced to compete with CrowdStrike, Palo Alto Networks, and Zscaler in enterprise accounts, and the EA structure is Cisco's mechanism for locking in multi-year commitments before competitive displacement occurs. Buyers should scrutinise the Security portfolio EA terms carefully — the bundle value is only real if the organisation has genuine deployment plans for all included products.

Portfolio 4: Applications Infrastructure

The Applications portfolio covers Cisco's hybrid cloud management, hyperconverged infrastructure management, and observability platforms. Key products include Cisco Intersight (data centre and cloud management), Cisco HyperFlex (hyperconverged infrastructure), AppDynamics (application performance monitoring), and ThousandEyes (internet and WAN monitoring).

AppDynamics is the most commercially significant product in this portfolio for most enterprise buyers. Following Cisco's 2017 acquisition of AppDynamics, the product has been positioned as Cisco's primary observability and APM platform, directly competing with Dynatrace, Datadog, and New Relic. EA pricing for AppDynamics is typically more favourable than standalone AppDynamics transaction pricing, but the EA structure again creates a lock-in risk if the organisation's observability strategy evolves during the contract period.

Portfolio 5: Provider Connectivity

The Provider Connectivity portfolio addresses service provider and carrier-grade networking requirements, covering segment routing, optical networking, and IP core infrastructure products. This portfolio is less commonly included in enterprise EAs — it is primarily relevant for telecommunications operators, managed service providers, and organisations managing large-scale WAN or metro infrastructure. Enterprise buyers in financial services, utilities, and transportation occasionally include this portfolio where the organisation operates carrier-grade WAN infrastructure.

Portfolio 6: Services

The Services portfolio is Cisco's support, professional services, and managed services layer. It can be combined with any one or more of the other five portfolios to consolidate hardware support, software subscription support, professional services, and managed monitoring into a single agreement with a unified renewal date. For organisations with large Cisco hardware estates generating multiple annual support renewals, the Services portfolio simplifies the administrative burden substantially.

True Forward: The Mechanism Every Buyer Must Understand

True Forward is Cisco's annual licence reconciliation process within the EA. It is the mechanism by which Cisco captures revenue from consumption growth that exceeds committed entitlements, and it operates very differently from the traditional true-up billing models used by other enterprise software vendors. Understanding True Forward in detail is essential before signing any Cisco EA.

How True Forward Differs from True-Up

Traditional software true-up billing requires the customer to pay for any overages retroactively at the end of the measurement period. If an organisation consumed 1,200 licences against a commitment of 1,000 in year one, a standard true-up would invoice the difference (200 licences) for the period in which the overage occurred.

Cisco's True Forward operates prospectively, not retroactively. When Cisco detects that consumption exceeds the current entitlement at the annual True Forward measurement date, the invoice does not cover the historical period of overage. Instead, the invoice covers the remaining term of the EA at the new, higher consumption level. The formula is: (price per unit) × (units consumed above entitlement) × (remaining months in the EA term).

For an organisation with three years remaining on its EA that has exceeded its entitlement by 200 seats at the annual measurement, the True Forward invoice is not for one year of overage — it is for three years of the additional seats, invoiced immediately. This prospective billing structure means that even a relatively modest overage in the early years of an EA can generate a disproportionately large True Forward invoice.

The Growth Allowance and When It Applies

For the Collaboration and Security portfolios, Cisco applies a 15 percent growth allowance at the suite level at initial purchase. This allowance permits consumption to exceed the committed entitlement by up to 15 percent before a True Forward event is triggered. The growth allowance is applied once, at the suite level, and does not reset annually.

The Networking Infrastructure portfolio operates on a per-device model and does not carry the same percentage growth allowance. Organisations that add network devices beyond their committed device count are measured at each True Forward event without a growth buffer. This makes accurate scoping of the networking portfolio particularly important at EA inception, because device count growth triggers immediate True Forward exposure unlike the user-based headcount buffer in the Collaboration and Security portfolios.

A semi-annual True Forward event can also be triggered outside the annual cycle if consumption exceeds 115 percent of the total entitlement (exceptional growth threshold). Organisations undergoing rapid headcount expansion, merger integration, or large-scale technology deployment should monitor consumption against this threshold continuously, not just at the annual measurement date.

Value Shift: The Partial Mitigation Mechanism

Cisco's EA terms include a Value Shift provision that provides partial mitigation for True Forward charges in certain circumstances. Value Shift allows the unused residual value of purchased but unconsumed licences within a suite to be applied against the cost of overages in a different licence within the same suite (intra-suite Value Shift).

In practice, this means an organisation that committed to 1,000 Webex Meetings licences but deployed only 800 can apply the unused value of the 200 undeployed licences against a Webex Calling overage. The cross-suite Value Shift option also exists in some portfolio combinations, permitting value to be transferred across portfolios within the EA. Value Shift is a useful partial mitigation but does not eliminate True Forward exposure — it only offsets the charge where there is matching unconsumed value to apply. Organisations that have sized all suites accurately at commitment have no surplus value to shift.

Multi-Suite Discounts and Cross-Portfolio Incentives

The Cisco EA's primary commercial appeal is the multi-suite discount structure that is not available on standalone product purchases. Cisco offers progressively larger discounts as the number of portfolios included in the EA increases, and additional incentives for buyers who include the Services portfolio alongside their software commitments.

Multi-suite discounts are applied at the portfolio level and negotiated as part of the initial EA commercial terms. The exact discount levels are not publicly disclosed and vary based on total contract value, competitive situation, and the specific combination of portfolios being committed. In our advisory experience, multi-suite EA discounts for large enterprise buyers across three or more portfolios typically range from 20 to 40 percent below standalone list pricing on the included products, with the highest discounts on portfolios where competitive alternatives are most credible.

Cisco also offers cross-architecture coverage incentives — the ability to add Security and Services portfolios at preferential rates when the EA is anchored by a Networking Infrastructure or Collaboration portfolio commitment. These incentives create commercial linkage between portfolios that would otherwise be independently negotiated, which can benefit buyers who genuinely need both the anchor and add-on portfolios, but creates a bundling pressure risk for buyers who need only one domain.

EA Contract Terms and Renewal Mechanics

The standard Cisco EA contract term is three years or five years. Five-year EAs carry deeper initial discounts but extend the commitment horizon and create greater pricing exposure at renewal if market rates or the organisation's Cisco footprint change significantly during the term. Three-year terms provide more frequent renegotiation opportunities at the cost of a slightly higher initial rate.

Cisco's EA renewal process begins approximately six months before the contract expiry date. Cisco's account team will initiate a renewal conversation based on the current committed entitlements plus any True Forward adjustments that have been applied during the term. The renewal baseline reflects the highest entitlement level recorded during the EA term, not the original committed entitlement at inception.

Organisations that experienced True Forward events during the contract period and whose entitlements were adjusted upward will find that their renewal baseline is higher than their original commitment, regardless of whether their current consumption has decreased since the True Forward event. This ratchet effect — where True Forward adjustments become the new renewal baseline — is one of the most commercially significant structural features of the Cisco EA and one that many buyers discover only at renewal rather than at inception.

Cisco's Fiscal Year and When to Negotiate

Understanding Cisco's fiscal calendar is one of the most consistently useful pieces of commercial intelligence available to enterprise buyers. Cisco's fiscal year ends on the last Saturday of July. The fourth fiscal quarter (May through July) is the period of highest commercial pressure for Cisco's account teams, who are closing against annual revenue and bookings targets.

Deals signed in Cisco's Q4 — particularly those closed in June and July — historically carry the deepest discounts available in any given period. The discount premium for Q4 closing varies by deal size and competitive situation, but in our advisory engagements, Q4 deals have consistently generated 10 to 20 percent better pricing than equivalent deals closed in Q1 or Q2, with the premium higher for deals in the $1 million to $5 million TCV range where individual account team quota attainment is most directly impacted by the specific deal.

Enterprise buyers with EAs renewing in the September to December window should explore whether the renewal timeline can be advanced to close in July of the same year. The six-week acceleration of the commercial decision in exchange for a 10 to 20 percent improvement in total contract economics is rarely a difficult business case to make. Cisco account teams will typically accommodate advance renewal discussions for strategically significant accounts.

The corollary is that Cisco Q1 (August to October) is the weakest period for commercial negotiations, as account teams have just reset their targets and have limited incentive to discount heavily early in the new fiscal year. Buyers with EAs renewing in August or September should proactively either accelerate to Q4 close or defer until the following Q4 cycle if the business case for early renewal is not compelling.

Building a Competitive Negotiating Position

Cisco EA negotiations are most effective when the buyer enters with a documented competitive alternative, accurate usage data, and a clear view of which portfolios represent genuine multi-year commitments versus which are being included to capture the multi-suite discount without a concrete deployment plan.

On the competitive side, the alternatives that Cisco account teams take most seriously are Microsoft (for Collaboration and Security), Palo Alto Networks and CrowdStrike (for Security), Juniper Mist and Aruba (for Networking), and ServiceNow or Dynatrace (for Applications). A credible competitive benchmark does not require an imminent migration commitment — it requires documentation that an alternative evaluation has been conducted and that a price-competitive alternative is available. Cisco will discount more aggressively when the alternative is credible and the buyer can demonstrate familiarity with the competitive option's commercial terms.

On usage accuracy, the most powerful negotiating input is a current licence utilisation report that documents deployed versus committed entitlements at the suite and product level across all portfolios. Organisations that have over-committed in prior periods and can demonstrate lower current utilisation relative to the renewal baseline have a legitimate commercial argument for a reduced renewal commitment. Cisco will negotiate this — the renewal quote will not reflect it automatically.

Finally, buyers should treat the EA as a complete commercial package rather than negotiating each portfolio independently. Cisco's account team is managing to a total contract value target, not individual portfolio margins. Offering to expand the EA scope (adding a portfolio the organisation genuinely plans to deploy) in exchange for a pricing concession on an existing portfolio is a negotiating lever that is available throughout the EA lifecycle, not just at renewal.

Common EA Mistakes and How to Avoid Them

Four EA mistakes recur consistently across the advisory engagements we conduct for enterprise Cisco buyers. Each is avoidable with the right preparation.

The first mistake is committing to more portfolios than current deployment plans support. The multi-suite discount is appealing, but each portfolio addition creates True Forward exposure that will not materialise if the deployment plans for that portfolio slip. A Collaboration EA anchored to 10,000 Knowledge Workers that the organisation plans to deploy over 24 months generates 24 months of licence costs for users not yet onboarded.

The second mistake is signing without understanding the True Forward ratchet at renewal. The renewal conversation should happen before the EA is signed, with explicit negotiation of the True Forward baseline mechanism. Some organisations have successfully negotiated renewal terms that base the renewal on average consumption during the prior term rather than the peak True Forward-adjusted entitlement.

The third mistake is neglecting the Services portfolio scope. Including support for products not yet deployed, or for hardware that is scheduled for decommissioning within the EA term, inflates the Services commitment without a corresponding benefit. Services portfolio scoping requires hardware lifecycle alignment that is often not completed before the EA commercial deadline.

The fourth mistake is accepting Cisco's standard EA term sheet without specialist review. The standard terms include provisions — assignment restrictions in M&A scenarios, automatic renewal clauses, and True Forward invoice payment timelines — that have material implications for organisations undergoing structural change. Legal and commercial review of the EA terms by a Cisco-specialist advisor before execution is a standard practice for sophisticated buyers and consistently surfaces provisions that should be negotiated.

Preparing for Your 2026 Cisco ELA Negotiation

Enterprise buyers approaching a Cisco EA negotiation or renewal in 2026 should complete six preparatory steps before entering formal commercial discussions: conduct a licence utilisation audit across all currently committed portfolios; map current and planned Cisco product deployment against each portfolio's committed entitlements; obtain competitive pricing for the primary alternatives in each portfolio; determine the True Forward history for the current EA and establish the renewal baseline Cisco will present; identify which portfolios have genuine multi-year deployment certainty versus which are included primarily for discount purposes; and engage a Cisco-specialist commercial advisor to support the negotiation if the TCV exceeds $500,000.

The combination of accurate utilisation data, competitive benchmarks, and professional negotiating support consistently produces materially better EA outcomes than the alternative of accepting Cisco's renewal proposal following account team-led discussions. The investment in preparation is typically recovered many times over within the first year of the renegotiated agreement.