Can we integrate cisco duo with cisco switches & Firepower for access.

[sathyajith]

Hello,

Can someone please suggest me if we can integrate cisco duo with cisco switch & cisco firepower firewall for accessing them?

Please note it's not for VPN access.. it's just for login these devices. 

[balaji.bandi]

have you checked with TACACS (ISE) with Duo for MFA for Device access :

https://community.cisco.com/t5/security-knowledge-base/duo-mfa-integration-with-ise-for-tacacs-device-administration/ta-p/3881767

https://community.cisco.com/t5/security-knowledge-base/duo-mfa-integration-with-ise-for-tacacs-device-administration/ta-p/3882063

https://community.cisco.com/t5/security-knowledge-base/protecting-access-to-network-devices-with-ise-tacacs-and-duo-mfa/ta-p/3783600

[sathyajith]

Thank Balaji for responding I can see that it's with cisco ISE can't we directly integrate with duo with the switch & cisco firepower firewall without the ISE? 

[balaji.bandi]

Not that i am aware of any solution i come across as i know.

Technically speaking, how is your Device configured with TACACS - i know some devices directly authenticate with AD. (this single authentication)

Duo is MFA - so you need to have single authentication locally and Multifacto with Duo for Security reason.

[sathyajith]

I am checking with the something where I can integrate switches & firewall with cisco DUO as the customer has the licenses for the same, but I can't find any solution for the same on internet. 

[balaji.bandi]

as i suggested that is not possible you need to have AAA mechanism in place to work.