Trying to implement MFA on Cisco switches with DUO proxy and Microsoft NPS. I have it working but I cannot figure out how to get it to pass the vendor attributes properly so that user is dropped into priv level 15. [radius_client] host=xxx secret=xxx...
Forum Posts
License: Duo Beyond I log in with username and push notification to Duo Central. Then when selecting an app from Duo Central (Salesforce, for example), I am yet again prompted for MFA verification. This is unexpected. I would prefer that once you au...
Will subsequent version of Duo support Access RemoteApp and Desktop Connection URL? We have deployed Duo authentication for RD Web server. However, your website shows that if RD Web is installed, Duo authentication disables the use of RemoteApp and ...
Hello, I am following the guide “Duo Authentication for Microsoft AD FS on Windows 2012 R2 and later” - Microsoft AD FS for Windows 2012 R2 and later | Duo Security last updated June 9th 2022. However, I am not able to see Microsoft ADFS under Protec...
We are migrating our Duo Access Gateway (DAG) environment over to using Duo SSO with the Duo Authentication Proxy. We’ve gotten almost everything working. When I went to migrate one of our SPs today, though, I realized that the attributes stored in...
Our VPN appliance currently uses LDAP-linked groups for Portal Mapping that allows access to specific networks for each group. However, it appears that with the Duo MFA config, we can no longer leverage groups because we have to replace the LDAP Remo...
In D241, Duo released version 5.7.1 of the Duo Authentication Proxy. Please note that this includes patches for two vulnerabilities that result from the third-party Python ipaddress library. A first vulnerability rated as critical risk resulted from ...
Just seeing what Duo suggests and or other admins out there do for alerting if the “Duo Security Authentication Proxy Service” is stopped.
We allow customers to access applications using Citrix Remote Apps. We protect applications using Duo Authentication for Windows Logon and RDP. Duo prompts for 2 factor on the first connection. But once someone is already logged in another person can...
Hello, I was testing Duo AlmaLinux9 (RHEL 9 derivative) and found an issue with the Duo RPM registry. After getting some help from AlmaLinux community, I found out that that AlmaLinux9 (and presumably other RHEL9 derivatives) have disabled SHA1 signa...
Resolved! Password Protect RDP Uninstall
Is there currently a feature, or a feature in the works, that will allow admins to set a password requirement to uninstall the Duo RDP installation. I have not had any users attempt to remove it yet, but it would be best to get ahead of the potentia...
Anyone else having an issue with the “Duo Security Authentication Proxy Service” not running after post upgrade? Ours is set to automatic and I know this is just something we need to check anyways post upgrade/reboot, but just thought I would reach o...
In the most recent release notes it was noted that Windows 10 20H2 support is ending May 2022 to align with Microsoft’s End of Servicing policy. 20H2 for Education and Enterprise End of Servicing is until May 2023 though. Since Duo is an enterprise ...
Error message being displayed - Authentication of SSLVPN user [z@RADIUS] from ip was rejected, user isn’t in the right group msg_id=“1100-0005” Same issue as WatchGuard Duo Radius As with this post, I can successfully connect when I have a user setup...
I can get my user to authenticate via DUO SAML integrated with Anyconnect one time. The next time the user authenticates the Cisco Anyconnect Login presents the user with Can’t reach this page. What is interesting is the url displayed is not the fu...
