MFA integration with cisco ISE

[Alexander Callum]

The goal is for the second of authentication factor to be required.
I've been trying to figure out for some time if there is a solution that would allow us to meet these requirements, I would be grateful if someone could help me.

[ahollifield]

Native DUO in 3.3+?

[Alexander Callum]

does not meet all the requirements including session caching and MFA for SSH. In addition, 3.3+ is a beta and not an official product.

[ahollifield]

What? MFA for SSH is certainly supported.... via TACACS+.....  3.3 is not a beta.  3.4 is also not a beta release?  What do you mean?

[Alexander Callum]

I didn't mean that mfa for ssh is not supported, but I can't understand how the session cahing mechanism can work with ssh,