For decades, private networks gave enterprises something the public internet could not: control. IP VPN connected branches, campuses and data centers over a network that enterprises could design, secure and manage around the needs of their business.

That model still works. What has changed is where the business runs.

Critical applications now span multiple clouds. Core business processes depend on SaaS providers and partners. AI workloads move data between locations, data centers, clouds and providers. Increasingly, a single business process can depend on several of these environments working together.

Yet for many, the private network still stops at the enterprise edge. Traffic traveling beyond it often crosses into the public internet, where no single entity controls the path or the conditions that determine performance and security.

The opportunity isn't to replace the private network. It's to stop treating the public internet as the default bridge between the private network and where the business now runs.

The public internet wasn't built for this

The internet is extraordinary at reaching everyone. It was never designed to be the backbone for an enterprise's most sensitive and critical traffic. When an application path depends on the public internet, the enterprise inherits its risks:

• Exposure: Every public endpoint is an attack surface for DDoS, route hijacking and interception attempts.
• Unpredictability: Traffic follows paths the enterprise can't see or control, so latency and congestion change from one hour to the next.
• Fragile resilience: One outage or routing error somewhere upstream can cut off a region from the cloud services it depends on.
• Policy gaps: The segmentation and security rules teams spent years building end at the edge of the private network.

Those risks are growing quickly. As Lumen CEO Kate Johnson noted in her open letter to CEOs, despite the early days of AI adoption, more than 50% of internet traffic is now created by autonomous workers. AI agents don't sleep, don't wait and don't browse the way people do. They move data continuously between locations, clouds and providers. Sending that traffic over a network nobody controls is a risk most enterprises wouldn't knowingly take.

What next-generation private connectivity looks like

The next generation of enterprise networking isn't about making the private network bigger. It's about making it smarter. Extended private connectivity end-to-end, so the traffic stays unexposed on controlled paths from the premises to wherever it needs to go:

• Premises to cloud: Branches, clinics, stores and plants connected privately to AWS, Azure, Google Cloud and Oracle Cloud
• Premises to SaaS: The business applications the enterprise depends on, reached without exposing over the public internet
• Cloud to cloud: Workloads and data moving between hyperscalers over a private backbone
• Enterprise to partner: Private, policy-controlled connections to the ecosystem the business runs on

The network also must be agile on demand. Connections should be added, changed and scaled through a portal or API in minutes rather than ordered and installed over months, because the business—and the AI workloads behind it—won't wait.

What's new: Lumen IP VPN now connects to Multi-Cloud Gateway

Eligible Lumen® IP VPN customers can now connect their existing private network directly to Lumen® Multi-Cloud Gateway. This extends the private network they already trust to the clouds, data centers and providers they depend on, without crossing the public internet.

Multi-Cloud Gateway gives enterprises one unified, private fabric to connect across clouds, sites and data centers, with the ability to add or change those connections in minutes. Before this release, using Multi-Cloud Gateway required a separate network connection. Now enterprises can connect through the stable IP VPN they already have and keep the network design and security policies they've spent years building.

"The next era of enterprise networking will be defined by one question: can you keep your most important traffic private, from the branch to the cloud to the partner, without starting over? For too long, the answer has been that privacy ends where the enterprise's own network ends, and everything beyond it rides the public internet. That's no longer acceptable when AI is moving your most valuable data around the clock. With Lumen, enterprises can extend the private network they already trust to every cloud and provider they depend on, and modernize at their own pace, one site and one cloud at a time,” said Jim Fowler, Lumen executive vice president and chief technology and product officer.

How it works

The IP VPN keeps doing what it does well: securely connecting point-to-point locations over a private network. Multi-Cloud Gateway plugs into that network as if it were another endpoint. From there, traffic can move privately between any cloud, site or data center connected through Multi-Cloud Gateway and Lumen IP VPN.

Existing segmentation and routing policies carry forward, so the enterprise's security model reaches the cloud instead of stopping at their network edge.

Teams set the pace. They can connect once, then move sites and applications over when they're ready, adding or adjusting connections through the Lumen Connect® portal or APIs as needs change.

What this looks like in practice

• A health system protecting patient data across clinics and cloud. Hundreds of clinics rely on IP VPN for systems that support patient care. As clinical applications and imaging move to the cloud, sending that traffic over the public internet adds both risk and unpredictability. What changes: Clinics stay connected exactly as they are, while patient-data traffic reaches new cloud and data center resources over private, automated layer 3 routing, never crossing the public internet.
• A financial services firm with years of security work behind it. Its branch segmentation and security policies have been refined over many years. Extending them to the cloud over public paths would weaken the model, and rebuilding it would mean re-testing all of it. What changes: The existing network design carries forward into Multi-Cloud Gateway, so the private, policy-controlled environment reaches the cloud and the team builds on work that has already been validated.
• A retailer or manufacturer with sites nationwide. Its stores and plants depend on cloud applications, SaaS platforms and supply-chain partners. Moving every location at once would strain budgets and teams, and leaving that traffic on the internet means living with outages it can't control. What changes: The business connects once, then moves regions, stores or plants onto private paths to cloud and partners when it's ready. Modernization follows business priorities instead of a migration deadline.

Why Lumen, why now

Private connectivity is only as strong as the network beneath it. Software can make smarter decisions about where traffic goes, but it can't engineer the infrastructure underneath it. More than 90% of the Fortune 500 run on Lumen, supported by more than 20 million U.S. intercity fiber miles and over 350 Tbps of global backbone capacity. Through ongoing Lumen Network Investments, Lumen continues to strengthen that physical network, while Multi-Cloud Gateway adds the digital flexibility to connect and scale across cloud environments on demand.

The largest cloud providers have made it easier to set up private connections directly to their own clouds. The harder problem is everything around that connection: bringing hundreds of branches, clinics, stores and plants privately into a multicloud, multiprovider world without rebuilding the network that already connects them.

Multi-Cloud Gateway is available at more than 10 million U.S. business locations and runs on the private, high-capacity Lumen fiber backbone. It links the private network enterprises rely on today to the clouds, providers and partners they need next.

Where to start

The question for network leaders is no longer whether to modernize. It's how much of the business still depends on a network nobody controls, and how fast that can change without putting what already works at risk.

For Lumen IP VPN customers, the next generation of private connectivity can start with the network they already have. So which connection will you take private first?

Explore how Lumen Multi-Cloud Gateway can help extend your private network to the clouds your business depends on.

_{This content is provided for informational purposes only and may require additional research and substantiation by the end user. In addition, the information is provided "as is" without any warranty or condition of any kind, either express or implied. Use of this information is at the end user's own risk. Lumen does not warrant that the information will meet the end user's requirements or that the implementation or usage of this information will result in the desired outcome of the end user. All third-party company and product or service names referenced in this article are for identification purposes only and do not imply endorsement or affiliation with Lumen. This document represents Lumen products and offerings as of the date of issue. Services not available everywhere. Lumen may change or cancel products and services or substitute similar products and services at its sole discretion without notice. © 2026 Lumen Technologies. All Rights Reserved.}