cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
82
Views
0
Helpful
1
Replies

Duo API Firewall

alain-seys
Level 1
Level 1

Hello,

we are using bitwarden self hosted as our password solution with duo as 2FA solution now we have but a firewall in front of it.
But the duo is not working my guess was that i needed to add the ip's for the duo endpoints but no luck for that.

LabelPort / range Sources
DuoTCP 44313.39.113.0/26
  52.19.127.192/26
  16.62.194.128/26
  52.59.243.192/26
  52.19.127.192/26
  16.62.194.128/26
  13.39.113.0/26
  54.241.191.128/26
  52.32.63.128/26
  54.236.251.192/26
  13.39.113.3/32

when i login with a user and at the point it needs to talk to duo the following error is presented:
Error requesting Duo health check: reqwest::Error { kind: Request, url: "https://api-0c1f2b65.duosecurity.com/oauth/v1/health_check", source: TimedOut }

is there a api endpoint that i am missing out on ?

1 Reply 1

DuoKristina
Cisco Employee
Cisco Employee

Take a look at this article: https://help.duo.com/s/article/1337

Note though that some Duo services use dynamic IPs for which we cannot provide a range, so we recommend using hostname allowlists if possible.

Duo, not DUO.
Quick Links