ScenarioWe want to add 2FA auth to our VPN connection.We currently have a Meraki MX100 firewall handling the VPN connection, which talks to Windows NPS Radius server, that integrates with an Active Directory.Status so farI tried setting up your authe...
Forum Posts
Hi, setting up a customer for trial but they were asking about going forward and would like to know advantages of doing On-prem auth versus Azure AD versus AD FS? Other than the proxies, are there any advantages or cons in one over the other? As well...
Is there a way to set up Entra ID SSO for admins logging into the MSP admin portal so that only MFA on Entra's side is needed and not the Duo MFA prompt as well?
Hi there, I was wondering what are deployment options for DUO, is it possible to deploy it on both, cloud and on prem? Also, regarding installation, upon licensing do we receive installation file, or OVA file? Or we get appliance and then deploy it a...
Dear good people,I need some queries regarding DUO to access network devices and application -i) Deployment modes of Duo (Where we can fit DUO in network)ii) Is there any dependency before deploying Duo?iii) How it will authenticate and works?
The issue you are facing with the Duo Authentication Proxy and the two domains (abc.com and xyz.com) seems to be related to the user directory configuration. Based on the information provided: Customer had only one domain (abc.com) configured on Duo ...
I'm trying to configure DUO on CentOS and following these steps:1.- Modification /etc/duo/pam_duo.conf[duo]; Duo integration keyikey = INTEGRATION_KEY; Duo secret keyskey = SECRET_KEY; Duo API hostnamehost = API_HOSTNAME2.- Update /etc/ssh/sshd_confi...
On a numerous Windows 11 machines that had Duo Desktop v6.5.0 uninstalled via programs and features. During the reinstall through the MSI it is prompting, "A newer version of Duo Device Health is already installed." Once I click, OK."It is asking for...
We have integrated our ISE with two DUO authentication proxies (for tacacs access to our switches). We configured a radius token object and added the DUO auth proxies primary and secondary. The timeout configured is 60 seconds with 3 attempts. When t...
In my environment, I have RD Gateway setup behind the firewall, and it does not have the Internet connection. In this case what are my best options to enable 2FA. I can facilitate SMTP from RD Gateway to mail server on corporate LAN and allow the req...
Dear all, Hope you are doing well. I have Cisco FTD configured with remote access VPN and Cisco ISE for AAA services using the local user database on the ISE itself, and now I intend to add the 2FA using Cisco Duo. After completing the configuration ...
I have configured my switch, ISE, and Active Directory to perform wired 802.1x and it runs well. But I want to add Duo to provide a second-factor authentication and I have tried the method provided in this page: Network Access and Segmentation with D...
We are trying to get Duo SSO working to protect ASA VPN logins across multiple domains. Our ASA can obviously authenticate users across domain names, and I have a SAML to Duo auth working in our primary domain. As I add other domains, though, I hav...
Hi Guys, I am new in Cisco Duo so I watched different video tutorials. It come to my attention that I need to install such application in my laptops or mobile for some of the use cases to work for example the RDP Windows Logon or the UAC elevation u...
Our Org has AD FS and Azure AD, secured by DUO.We are deprecating AD FS in favor of a normal Azure authentication experience, secured by DUO.We are planning on entering users into Staged Migration mode to perform this.Are there any DUO configurations...
