Policy & Access Control

Is there a way to block countries using the authentication method?  For example I am able to block countries if the device IP shows in a country (that is not US, Canada, or India), but I want to block if the device IP is in say, the US, Canada, or In...

Hi,   I was wondering if someone can explain the Risk based profile acceptance (allowed) and timeframe; I'll explain, in doing Immpossible travel testing the first time I dit it was testing from a VPN through Norway after just logging in from Canada....

Morning All:I am deploying laptops with MFA to log into the laptop as a security protection.  I want to remove the current need to MFA into the Remote Server.  Primarily this causes frustration on the part of the end user.  I am unable to locate a se...

Hi All, Needs to configure trusted endpoint on windows/mac os user machine using guid. Can anyone know how to do it or share any relevant document

We have an old Cisco ASA (5508) which has Duo configured for AnyConnect VPN, but using local accounts ONLY for Admin/Management. We are moving to a new FirePower device (in ASA mode) and want to enable some sort of SSO or MFA for Administrators using...

We have multiple, disconnected networks where we have the DNG installed. We’ve been using the RDP functionality for a while in beta and want to expand it to other networks now that it’s in GA. But I don’t see a way to add another gateway to the Heal...

I made a change few months ago under operating systems for one of the policy and now the operating systems are no where to be found under any policy.

Hello,how can create a script for duo device health agent that would always have the checkmark selected for "Launch DUO device Health when I log in"We are receiving a lot of users that are not able to connect to cisco secure vpn client due to DUO hea...

Is it possible to restrict self-enrolment so that it can only be done in a trusted environment, eg on premise or from a trusted device?  If inline self-enrolment is enabled, and a user who has never bothered to enrol gets phished, the attacker can si...