We are excited to announce the latest enhancements to Experience Insights in Cisco Secure Access. These updates are available to all Secure Access customers and are designed to streamline troubleshooting, improve ThousandEyes agent registration, and enhance visibility into network performance.
DEM AI
Overview:
DEM AI enhances your environment with real-time analytics and AI-driven insights, proactively identifying and mitigating performance issues for a more resilient network.
Customer Benefits:
- Proactive Detection – Quickly assess endpoints, aggregate data, and identify issues before they impact performance.
- Enhanced Visibility – Gain comprehensive insights into endpoint performance and user experience, enabling faster troubleshooting and decision-making.
- Scalability – Adapt to evolving challenges with AI-driven capabilities that scale with your infrastructure while maintaining operational efficiency.
Getting Started:
Prerequisites:
- Cisco Secure Access Org with Essentials or Advantage license
- Active ThousandEyes tenant connected to Cisco Secure Access tenant
- Endpoint devices with ThousandEyes Endpoint Agent (Windows/MacOS: standalone agent or Secure Client module)
Users can ask about:
- Device health and performance
- Network performance toward Cisco Secure Access Cloud
- SaaS application performance from Cisco data centers
Users can start conversations via:
AI Assistant Icon – Located in the dashboard’s top-right corner.
Experience Insights Menu → AI Insights Tab – Click on conversation starter buttons.

Once opened, users can begin interacting with DEM AI. Using pre-populated conversation starters is recommended for a smoother experience.
Example Conversation Starters:
What SaaS apps have the worst performance?
Which countries have more than 50% unhealthy devices?
What are the top 10 devices in Indonesia with latency above 30ms to Cisco Secure Access?
How is "device name" experience using Dropbox?
ThousandEyes Agent Download Profile
Overview:
Customers can now seamlessly download the ThousandEyes module with the organization profile from the Cisco Secure Client download modal under End User Connectivity. This removes the need to manually copy and paste the connection string, making it easier to register ThousandEyes agents on endpoints.
Customer Benefits:
- Simplified Deployment: Users can quickly download the module without manual configuration.
- Increased Adoption: A more intuitive and accessible registration process will encourage the adoption of Experience Insights.

Top System Processes Monitoring
Overview:
Experience Insights now includes real-time visibility into top system processes, allowing customers to identify processes that contribute to high CPU or memory usage. This new feature is accessible within the “Endpoint Health” section of the Experience Insights user-specific page.
Customer Benefits:
- Improved Troubleshooting: Pinpoint which processes are consuming CPU or memory to identify performance bottlenecks.
- Real-time Data Collection: The ThousandEyes agent collects system process data in real-time, providing up-to-date insights.
- Granular Process Details: Admins can view specific Process IDs associated with process consumption.
- User-Friendly Interface: Color indicators highlight high CPU/memory usage, making it easy to identify issues and take action.

Default Test Target
Overview:
Previously, 1 of the 2 default tests that comes with the ThousandEyes endpoint embedded license was fixed to the VPN headend. Now, customers have the flexibility to test the connectivity from all endpoints to the following targets:
- RAVPN
- Zero Trust Access (ZTA)
- Secure Web Gateway (SWG)
- Private applications (VPN or ZTA protected)
- Public applications
Customer Benefits:
- Customizable Testing: Admins can select the most relevant test targets based on their deployment type.
- End-to-End Visibility: Enables full data path monitoring from the endpoint to the application, covering VPN/ZTA in between.
- Optimized Traffic Management: Guidance is provided on traffic calculation to prevent overloading applications.
- Included at No Extra Cost: Available for all Secure Access customers with ThousandEyes endpoint embedded licenses.

Documentation:
If you have any questions or need further assistance, please reply to the post or reach out directly to your Cisco partner.