cisco ise and duo integration

[elite2010]

Hi,

I am using cisco ise as primary authentication for vpn users . 

Is it possible to  integrate duo with  ise as secondary authentication  for only vpn users 

Thanks

[Anurag Sharma]

Yes, absolutely. It's a very common setup.

[saxenanitesh8522 · Accepted solution]

Hi,

you follow this thread

https://community.cisco.com/t5/network-access-control/ise-and-duo-integration/td-p/4047810

(https://duo.com/docs/ciscoise-radius#change-the-authentication-policy