Hello,Since FortiGate will no longer support SSL VPN, we are going to switch to using Client IPsec VPN. However, I wonder if we can still use Cisco Duo for MFA, as there is no application or tutorial available for this purpose.Thanks
Forum Posts
I'm wondering if anyone has seen issues with having Duo SSO configured for AD to M365, and when trying to get to a SharePoint link that my customer has shared to me, I am logged in with my Microsoft 365 account, but it redirects to a "You need permis...
We have Duo SSO setup with O365. The SSO is working fine. When we create a new EntraID Enterprise App, the Enterprise App also uses SSO- it uses the same O365 SSO Duo App for authentication. Is there a way to apply different Duo Authentication Po...
Resolved! Windows Logon - Phish Resistant?
Hello, We are working on enabling phish resistance with our Duo MFA. From what I can tell, for Duo Mobile users, that relies on proximity verification. Great, so I enabled that and have it working. But it doesn't work/apply to the Windows logon MFA a...
I am using Cerberus FTP and after they integrated DUO for 2FA via Web SDK I had successfully followed the instructions on their site to enable DUO. When the universal prompt was available I enabled that and all was working fine. Then somewhere betw...
Welcome to the Cisco Community Ask Me Anything conversation. Submit your questions from Tuesday March 31, 2026 through Wednesday April 8, 2026. Your Experts Namita Bhurke, Bahaa Saleem, Aaron Wolff, Wes Miller, Sheila Vida, and Derrick Sison will be ...
Currently we are using Microsoft Azure Active Directory for MFA in our O365 tenant. I was talking with a peer and they have set up Microsoft Entra ID: External Authentication Methods for their MFA in O365. In looking at their configuration, it seems ...
Anyone have experience in successfully implementing the Duo Security Authentication Proxy behind a KEMP LoadMaster (load balancer) appliance array ? We are attempting to move from proof-of-concept to production deployment that will include HA for the...
Hi everyone,We’re an MSP running Duo Windows Logon across multiple Windows 11 Pro/home environments. Each setup enforces a 90-day password expiration policy for compliance.Since upgrading to v5.0 and latest 5.1.1, users are hitting a password reset l...
Hi Duo-Community,I am wondering, how to achieve the following scenario:We have a windows server (lets call it RDS-01), which has the most remote desktop roles (connection broker, rdweb, etc.).Then there is a second one (lets call it RDS-02), which is...
Resolved! Duo with Fortigate IPSec VPN problem
Hi, I followed the procedure that explains how to setup Duo for Fortigate’s SSL VPN as i was told that it should work for IPSec VPN connections also. Everything works as expected but the problem is that the connection still works even before i receiv...
So, from what I can tell windows hello is STILL not supported by Duo for windows login is this correct? IF so, do we know if it ever will be, or has it been announced? We have clients refusing to purchase Duo for this reason.
Hi All,Just wondering if we could customize the verification code font size?After update the latest software come with change with the graphical interface. Where it use to be big font for the code display.Regards,Peter Ho
In Duo Automated Provisioning using SCIM, I’m observing the following behaviour and would like to confirm if this is expected:When a user is first removed from a SCIM-provisioned group and then deleted from Duo, no outbound SCIM DELETE request is sen...
I have set up duo for unix on several ubuntu 20, 22 and 24 machines. On all machines, the "pamtester -v ssh myname authenticate" command triggers a push, then follows up with prompt for password (as expected.)On some machines, ssh only requires a pa...
