Policy & Access Control

I’m trying to configure my policies to make it as easy as possible for my users. I know, security shouldn’t be easy and may defeat the purpose of MFA. My set up: Cisco Duo, Directory Sync to AD, protecting Google Workspace. We’re a school district. A...

Is anyone else who is trying the new Risk Based Authentication getting users with a “Country code mismatch detected with risk-based factor selection” which doesn’t elevate the auth, it just errors continuously? The scenario is the user’s Access Devic...

New user. I need to see a roadmap for the duo health app and when new security agents will be added. If we turn on that blocking then a lot of people will be blocked as the list duo supports for security agents is small. With BYOD and so many devices...

Hello, I have an issue with a Duo Implementation with Azure AD and a conditional access policy. For authentications with a Mobile phone app, the users are presented the login screen for Azure AD, enters the password, and then presented the Duo optio...

HI all Am hoping for a little advice I have recently setup our DNS server which uses openLDAP to connect to our Debian DuoProxy server to authenticate against the AD I have managed to get it to work but there is no 2fa Prompt(we are looking at making...

Hello All, I need to add one Domain in US location portal. We need to know, Do we need to make changes in proxy servers? Also if proxy servers are in different domain and AD server in different domain. Will the Cisco DUO authentication will work...

Is there any way for us to block the phone number/device from being registered as a device within the DUO admin portal?

Hi, First time poster, go easy! I am using load balancer to load balance RDGW traffic however the source IP reported to DUO is always from the internal IP address of the Load Balancer. Has anyone got this configured so that the external source IP is ...

Anyone seeing issues with SMS?

I find it really frustrating that there is no options like there is with OS’s that I can say don’t warn a user until their browser is X days out of date. same for Java. It would be nice to be able to have that option so we can set that equal to our c...

Hi all, The remember me checkbox is no longer able to be checked on Safari. This happened quite recently, so I think it began with Safari 12. I have tried turning off both the “Block all cookies” privacy setting and “Prevent cross-site tracking” sett...

Good afternoon! I want to ask if the Free version of Cisco DUO is not limited to 30 days and we can use it for longer time. We understand that after trial of 30 days functionality will be limited in comparison to other versions, but we mostly need on...

Hello, First of all I’m sure this has come up frequently so apologies if I’m asking something that has been answered, and I just didn’t find it. I’m trying to wrap my head around the fail modes, and their relationship with offline mode. My under...

Does Passwordless work with RDP? I appear to have it configured, to the point of a group policy applied to a group. But i am not seeing the prompt to set it up? Also, how is there not a “Passwordless” Category yet? lol

Hi, We plan to install DUO on ESXi VM’s running Windows. These VM are processed by Veeam Backup and Replication : Replicas and Backups of these Vm’s are created. Veeam sometimes need to log to the guest OS (the Windows OS): would installing DUO for R...