IT Services Specialist Iii at FOREST GROVE, CITY OF
Real User
Top 20
Jun 3, 2026
As our organization adopts and deploys AI agents, we are not there yet in our sector, in the public sector, but pretty soon we will catch up, and I am pretty much sure we are going to be still using Cisco Duo. Cisco Duo fits as an added security layer in our broader security environment. The key capabilities beyond the MFA that led me to choose Cisco Duo as our primary identity security partner was its easy integration into our current IT infrastructure. Cisco Duo has improved our operational efficiency and reduced costs in areas such as authentication, IT support, and security operations by enhancing our security workflows; pretty much everyone is using MFA at work, making it easy for us to see who is actually accessing our network and computers. The best advice I can give to another organization considering Cisco Duo is that it is user-friendly and easier to integrate into an IT infrastructure. I would rate this review a 10.
Cisco Duo fits into my broader security environment as part of a defense-in-depth strategy. What I appreciate about Cisco Duo is that it adds that extra layer of authentication, confirming who I am. Not only does it verify who I am, but also what I have, which would be that code or the push notification that I am approving. Cisco Duo provides another layer in the cake of securing my enterprise and serves as a natural plugin to facilitate access across whatever integrated applications I may need to access. Cisco Duo has given me the ability to ensure that only specific people who need to access certain data are the people accessing it. They receive the push notification, and if they are not allowed to access that, they are not going to receive the push notification. It has helped us lock down access more granularly. Cisco Duo has helped me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform by ensuring that the person is who they really are. It makes sure that not only is it Sam from accounting accessing this tool, but they also have Sam from accounting's phone. It is not someone just pretending to be Sam or someone that Sam gave the credentials to. It ensures that only the right people are accessing the right resources at the right times. When evaluating my identity strategy, I was looking for something that is simple and easy to plug in. Since we were already a Cisco partner and client, it was a natural choice and evolution for us to adopt Cisco Duo. In the experiences we have had with clients, such as the one who had the breach, it became a natural piece to ensure a simple, easy way to lock my network down and keep the bad actors out. The key capabilities beyond MFA that led me to choose Cisco Duo as my primary identity security partner are its robust MFA functionalities. If I had to highlight something exciting that is new, I do appreciate the ability to integrate IAM as part of that. However, the key functionality remains MFA, particularly the ability to manage risky logins. It is about making sure not only does this person geographically live in the location where they are trying to access, but are they in the place they are supposed to be. For example, are they trying to access it from China, potentially compromising their Cisco Duo credentials? I would see that and receive a secondary layer of protection because Cisco Duo detects the unusual access attempt and prompts for further authentication from the administrator. My advice to other companies considering Cisco Duo is that they should have had it in yesterday. It is essential to get all of the rich feature benefits out of it. If they are only using it as an MFA tool, they should look for ways to start integrating it into SSO to facilitate seamless authentication across SaaS or on-premises applications with that capability in Duo. Additionally, I recommend exploring features such as risky logins and ensuring they are accessing the full breadth of what they are paying for. I would rate this solution overall as a ten out of ten.
Director, Information Technology Technical Services at MOBILE INFIRMARY ASSOCIATION
Real User
Top 20
Jun 3, 2026
If Cisco Duo were removed by some chance, it would be a major impact. If it were removed without another solution, we would be going backwards, which would not be a good situation. When evaluating my identity strategy, I was looking for a standalone MFA tool, and Cisco Duo was the best fit for our organization since we use Cisco products across our environment. I believe there is much we can learn about what Cisco Duo can do in other areas and broaden that scope. I am excited to go back and learn what more Cisco Duo can offer. I would rate Cisco Duo a 10 overall in terms of what we have wanted to use it for; it has been painless and seamless. For other companies considering Cisco Duo, from a multi-factor perspective, it is easy to implement. The platform has many connectors pre-built, making it straightforward for us to stand up. We can add applications within 30 minutes, making it a simple and efficient process to get applications onboarded. I would definitely recommend them to give it a try.
Before implementing Cisco Duo, we were concerned about authentication hijacking, as we had an incident where someone managed to gain access to our server. They provided us with the username and password, suggesting they could access it at any time. After introducing Cisco Duo, we realized that while our existing firewall provided security, Cisco Duo significantly reduces the risk of authentication hijacking. Cisco Duo works even beyond on-premises solutions, enhancing security in cloud environments. The key capabilities that led me to choose Cisco Duo extend beyond just multi-factor authentication. It serves as a module that communicates with ICE, enabling it to take actions when necessary. While Cisco's other security measures are robust, integrating Cisco Duo into our cloud systems is still a critical need. I see Cisco Duo fitting into my broader security environment as an essential security layer rather than a control point. It functions mainly as a security layer to support Cisco’s extensive range of security products, which vary and might not fully integrate with all of them. When evaluating my identity strategy, I wasn't looking for a standalone MFA tool; what I sought was a part of the broader Cisco security ecosystem. While I recognize Cisco Duo predominantly as a multi-factor authentication solution, it integrates with other security tools, making it valuable in accessing various services, though I haven't yet seen a connection between Cisco Duo and agentic AI. I would tell other organizations that even if they have existing authentication systems, they should consider Cisco Duo. It works effectively across various environments and isn't limited to operating system-based access. I would rate Cisco Duo eight out of ten, and its comprehensive capabilities are a significant advantage.
Network Engineer at a tech services company with 11-50 employees
Real User
Top 20
Jun 3, 2026
When evaluating my identity strategy, I was looking for a comprehensive identity security platform rather than a standalone MFA tool, since I am an MSP servicing multiple clients, and I prefer a solution that integrates with many different technologies as most clients have a hodgepodge of equipment. Cisco Duo's broader IAM capabilities meet those needs by just adding that extra layer of security, which is always important. I am using it as an added security layer that integrates with other security products and tools that I may have in my stack. The key capabilities beyond the MFA that led me to choose Cisco Duo as my primary identity security partner included MFA as the main one. Cisco Duo has improved my operational efficiency to reduce costs in areas like authentication, IT support, and security operations by just securing the environment. It's that extra layer; after putting MFA behind it with Cisco Duo, there's now that extra layer we can fall back on. Those threats have evolved in ways that I don't even know how to start narrowing it down; they evolve every day, and so it's just trying to keep the network as secure with multiple layers of authentication on it as much as we can put it on. Looking back, Cisco Duo helps me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform by providing another level of security. It puts another layer on everybody's accounts, so if an account is compromised, there's still that extra layer of authentication needed to get through. If Cisco Duo was removed, the impact on my ability to manage and secure access across my entire identity ecosystem would mean that, for some of the school systems that we support, we would need to find a different solution, probably Microsoft Authenticator if they have the infrastructure for it, but we would probably be scrambling to get some different authentication sources in. My advice to another organization considering using Cisco Duo is to take into account the licensing, ensuring that your environment supports it, and looking at making sure it can integrate with the different equipment you have in your environment. I would rate this product an eight overall.
System Administrator at a construction company with 201-500 employees
Real User
Top 20
Jun 3, 2026
If Cisco Duo were removed, it would take down the VPN connectivity for everybody, so we would have to find some way around that. The types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo include needing multi-factor authentication for the VPN because it lets people into our network remotely. We have not looked at using AI agents in our organization yet. I am using Cisco Duo as an added security layer that integrates with other security products and tools that we have in our stack. My advice to another organization that is considering using Cisco Duo is to go for it. I would rate this product an overall eight out of ten.
Network Engineer at a university with 10,001+ employees
Real User
Top 10
Jun 3, 2026
In terms of advice for any other companies or organizations that are considering Cisco Duo, I cannot think of any specific advice. However, in terms of reliability, we have had no issues with it, so if reliability is a huge priority for your organization, then I would definitely look towards Cisco Duo. My overall review rating for Cisco Duo is ten out of ten.
Network Reliability Engineer at a computer software company with 1,001-5,000 employees
Real User
Top 20
Jun 3, 2026
If Cisco Duo were removed, we would have to scramble to migrate to another solution such as Azure or something else, some other sort of MFA. The types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo usually refer to some sort of phishing or spear phishing campaign via email, which is the majority of the attacks that we see. More recently, there are other vectors through personal space that we see. I think Cisco Duo helps with that because if there are situations where people use shared passwords, it will help protect against that. As my organization adopts and deploys AI agents, we are not quite there yet, and that is something I will address. Cisco Duo has improved my operational efficiency and reduced costs in areas such as authentication, IT support, and security operations because many times it ends up coming down to the ease of use, especially for the third-party contractors we have. We cannot necessarily touch all of their devices, so we do not know how secure they are. Having the additional layer of MFA and an easier way of deploying it rather than supplying them with a token or a new phone means we can use their existing devices and the Cisco Duo application. Having that flexibility and how easy it is to deploy is really good. I have not expanded usage, and if I had, I do not believe it would have been a smooth process. My overall rating for this review is 9.
IT Support 1 Professional at a university with 5,001-10,000 employees
Real User
Top 20
Jun 3, 2026
I'm sure we are running other third-party apps as well alongside Cisco Duo, but I know Cisco Duo is the main driver. If they're looking for ease of use and scalability, that's the product to go with. I would give this solution a rating of ten out of ten.
The steps my organization has taken to become more resistant to phishing attacks include migrating to non-password-based accounts through OTP passwords and biometrics, and utilizing personalized account or device-based accounts. Even if an account is compromised, a user would need to physically have that device in order to log in. Since there is no password, there is nothing to compromise. My organization is moving toward a passwordless approach. As my organization adopts and deploys AI agents, I am approaching agentic IAM to ensure these non-human identities are secure, and Cisco Duo plays a role in that strategy. This is something I am currently learning about this year. Cisco's AI guardrails allow me to assign agentic AI credentials and identify what an AI is, tracking their activity, access, and actions. Once I can do that, I can start putting together access policies that target specific AIs. This is new territory for my organization. I am just starting to implement AI agents, and I discovered this capability at Cisco Live, which is promising. When evaluating my identity strategy, I was looking for a comprehensive identity security platform. Cisco Duo's broader IAM capabilities meet those needs as they tie into Entra and are replacing many of my on-premises identity solutions. Previously, a remote user had to authenticate against a local server already within my environment to gain access, which exposed that infrastructure to outside attacks. Now I am pushing that into the cloud and can depend on Cisco for some of those protections, making the process easier. I would rate this review an eight out of ten.
Senior Director, Networking at Rackspace Technology
MSP
Top 20
Jun 3, 2026
The steps my organization has taken to become more resistant to phishing attacks and the contribution of Cisco Duo's broader security approach are not my area of responsibility. The types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo and how those threats have evolved are not my area either. Cisco Duo's visibility into identity-based risks has not improved my ability to manage the security of both human users and non-human users' identities across my environment because it is not my area of expertise. Key capabilities beyond MFA led to my choice of Cisco Duo as my primary identity security partner are not applicable. Data points or examples that I have are not available. I chose Cisco security because it offers the best unified partner solutions. I gave this review a rating of ten.
Ingeniero Soporte Tecnico Redes Y Comunicaciones at Telefónica Celular S.A.
Real User
Top 10
Jun 3, 2026
Cisco Duo is an excellent solution to protect our network. We preferred Cisco products more than others, which were the factors that led to the change. I chose Cisco security because we have extensive time working with Cisco as a partner. The key capabilities beyond the MFA that led me to choose Cisco Duo as my primary identity security partner are because we have a good experience using Cisco products. I would rate this review a 10 out of 10.
Information Systems Design Analyst at a real estate/law firm with 11-50 employees
Real User
Top 20
Jun 3, 2026
Regarding Cisco Duo's adaptive authentication feature, I do not use that. I would describe my experience with deploying Cisco Duo as positive. I am on a different team that does not really deal as much hands-on with the deployment of it. I more or less just see the end-user effects of it, and so far, it seems as though everybody has adapted very well to it. To my knowledge, there were no challenges faced with the deployment of Cisco Duo. My advice to another organization that is considering Cisco Duo is that it works and benefits our community. I would suggest that you look at what fits your organization the best, and I would try my best to explain how it has worked for us. I would rate my overall experience with this product an 8.
Digital Technology Analyst Ii at a energy/utilities company with 1,001-5,000 employees
Real User
Top 5
Jun 3, 2026
I use Cisco Duo's adaptive authentication feature. From my perspective on the network side, I do not think Cisco Duo's dashboards really apply to me; that is something that our security side handles. I have not used Cisco Duo's push notification method on my side, but I know there are other teams that have, and they definitely prefer it. Right now, I do not think there is anything about Cisco Duo that I would improve; I have been happy with everything so far. My advice for organizations considering Cisco Duo is to implement the service quickly. I would rate this review a 9 out of 10.
Vice President, Technology Alliances at a tech vendor with 201-500 employees
Real User
Top 20
Jun 3, 2026
I do not assess the impact of Cisco Duo's dashboards on identifying security vulnerabilities because I do not look at them; I am just an end user of the product and do not use it from that respect, so I am not part of the IT team that analyzes that particular telemetry. I do not use Cisco Duo's adaptive authentication feature. I use Cisco Duo's push notification method, and it has improved authentication times across platforms by being faster. I would rate this product a 10.
We weren't using another solution to address similar needs prior to adopting Cisco Duo, as it was our first foray into this area, and it's a good thing, so we're not looking at anything else. I've been a proponent of Cisco for a long time, as I trust their products and know my team trusts their products, which is why I choose Cisco Security at the end of the day. If I had to rate Cisco Duo, I would probably give it a 9 out of 10 because it's really good and close to perfect, but everything can be improved so I can't give it that coveted 10 out of 10. For other companies considering it, I would advise them to take a staged rollout approach for success. I would rate this review a 9 out of 10.
IT Technician Ii at Spero Financial Employees, Location, Careers
Real User
Top 20
Jun 2, 2026
I rate Cisco Duo overall as a 10 out of 10 and my advice to other organizations considering Cisco Duo is to implement it. I was not part of the pricing, setup costs, and licensing decisions, but I know the person who was involved, and they did not have any issue with it. I give this review an overall rating of 10.
Manager, Network Engineering Operations at a wholesaler/distributor with 5,001-10,000 employees
Real User
Top 10
Jun 2, 2026
The impact of Cisco Duo's dashboards on identifying security vulnerabilities is assessed by our security team. Cisco Duo's trusted endpoint device capabilities have not necessarily helped improve our organization's security policies, but it is a trusted remote location, which has made it very streamlined. We do use Cisco Duo's push notification method, but the way we have it implemented does not trigger very often, so I cannot say it has had a huge impact on authentication time across platforms. The effectiveness of Single Sign-On in reducing login complexities for our users is excellent simply because it is one set of authentication, so we are not having thousands of logins each day. I would rate this review a ten out of ten.
The advice I would give to another organization considering using Cisco Duo is to start small and then scale out. Make sure you have all the kinks and all the bugs settled within ten to one hundred users before going to a grand scale. I would rate this product overall as ten out of ten.
Network & Security Engineer Ii at a financial services firm with 1,001-5,000 employees
Real User
Top 10
Jun 2, 2026
The question about the impact of Cisco Duo's dashboard on identifying security vulnerabilities goes to our security team. Cisco Duo's trusted endpoint devices capabilities are most likely not part of my responsibility in helping to improve our organization's security policies. I would say to another organization considering using Cisco Duo that it is very reliable and comfortable; Cisco Duo is very easy to manage, and I would recommend it 100%. I would rate this product a 10 out of 10.
Senior Network Engineer at a program development consultancy with 10,001+ employees
Real User
Top 20
Jun 2, 2026
I assess the effectiveness of single sign-on as a necessity; we can't have people barely manage one password, let alone four or five. I would rate this review an overall eight out of ten.
Information Systems Security Analyst at a real estate/law firm with 11-50 employees
Real User
Top 10
Jun 2, 2026
We have been using Cisco Duo for about three years now, but it is longer than that before we kind of implement everything and make it work for everybody. It is still a work in progress for us right now. Looking back, the biggest impact Cisco Duo has had on our company is enhancing our security posture. While there were initial concerns about the additional login steps, the importance of Cisco Duo for security is now more evident, particularly as we utilize it mainly for VPN access right now, while gradually moving towards supporting any end-user devices within our community. When we first evaluated Cisco Duo, we were primarily looking for a multi-factor authentication solution, but we are also exploring other features that Cisco Duo can offer within the company. I think it is a good product, though we are not using it to its full value yet. Regarding our company's adoption of AI agents, we are not really implementing much on the AI side yet. I know we are working on ensuring that the AI features are secure, but I do not think we have touched much on Cisco Duo within the AI context, which is something we can look into. For phishing attacks, we have our email filter, which is not directly related to Cisco Duo, but that is the route we have right now. With Duo, it is just for them to log in, while we focus on more of the email filter for phishing attacks. I have been mainly concerned about email phishing or credential-based attacks, as many people are not really aware or computer literate enough to know which emails will affect them or which emails are useful. They tend to click whatever they want, which then leads to issues. With Cisco Duo, the impact is knowing that it is them logging in instead of somebody else. Overall, I think Cisco Duo is a good product, and I hope that everyone looks into improving security measures, whether for companies or personal use. I would rate this review ten out of ten.
Manager, Data Center at a real estate/law firm with 11-50 employees
Real User
Top 10
Jun 2, 2026
The biggest impact for our company if Cisco Duo were removed today would be a loss of MFA. The biggest impact would be the loss of that multi-factor authentication and the ease of use of multi-factor authentication for the company. It has changed our ability to detect and respond to identity-based risks because of the observability that Cisco Duo provides. We get to see all of those logs, all the authentication logs. If we see all of the extra users that are getting hit, then we can act accordingly. This information comes from the GUI on Cisco Duo. If we actually go to the proxy auth logs, then we even get further detailed information on those attempts. Our biggest impact from Cisco Duo is probably the security side. Being able to implement that multi-factor authentication. User experience is going to be an ongoing journey with everybody. As we continue on, it becomes easier for MFA. But for companies that are slow to implement MFA, the culture can be slow to adopt. Our primary objective was multi-factor authentication on the identity side. As soon as we sync AD, it allows us to immediately have that MFA for each user. Cisco Duo is much broader than just an MFA product. What we use it for in our use case at the time we implemented it was primarily for MFA. Cisco Duo is much more than an MFA product because of the applications you can integrate and single sign-on. If you have any other applications that you want to single sign on, you can set that up either as its own identity provider or through the applications in Cisco Duo portal. I would rate Cisco Duo at least an eight out of ten. My advice would be if you want something straightforward and simple for an MFA solution, choose Cisco Duo as it has simple installation, is quick, and just works.
Senior Systems & Network Engineer at a retailer with 51-200 employees
Real User
Top 10
Jun 1, 2026
I would rank Cisco Duo as a 10 because we haven't had any issues with it. It's worked well for us. It's fairly easy to use, and our end users appreciate it. I would recommend Cisco Duo personally, based on my experience and seeing the things it can do with the implementations that you can make with it. I would recommend it for sure. My overall rating for Cisco Duo is 10.
Network Security Specialist at General Authority of Customs
Real User
Top 5
May 4, 2026
I have experience with Cisco Duo. I have been quite satisfied with Cisco Duo. The implementation of Cisco Duo is straightforward. I am a customer of Cisco. I would rate this product seven out of ten overall.
My overall experience with Cisco Duo comes from working on the product from 2019 through 2020 and on and off for around three and a half to four years total. I am a service provider for Cisco as an MSP. My role was a partner as part of a couple of our SGOs in Deloitte. We had an alliance partnership where we offered services, advised, implemented, and operated for clients. We also worked with Cisco to package different solutions and position them to clients after running assessments to improve their security posture. Cisco Duo can be used for centralizing identity and access management across different business units and locations, integrating remote access VPN with identity systems, creating role-based access controls, implementing MFA and phishing resistant authentication, and conducting security assessments to identify gaps and improve security posture. Some positive features about Cisco Duo include deep integration with other Cisco products, phishing resistant MFA with Talos Threat Intelligence enrichment, identity intelligence for behavioral analysis and access control, cloud-based SaaS delivery eliminating on-premises infrastructure costs, and stable performance with well-planned maintenance windows. Cisco Duo has not been adopted by a very large set of enterprises compared to competitors like Okta and Azure Entra ID, which represents a significant area for improvement. The overall review rating I would give for Cisco Duo is seven.
I have experience with Cisco Duo across different IGA and IAM security products including Oracle IAM, Okta, SailPoint, Ping, Cisco Duo, Active Directory, and Entra ID, which is Microsoft's offering. My experience with Cisco Duo's strong security authentication system has been good. It is seamless and easy to integrate. It is flexible. Cisco Duo's IAM is evolving because it now includes AI. I am not sure if I have fully used OAuth, the authorization component. I think it is there, but I just have not fully played with it. The OAuth, OpenID, and SAML are all present, but this IAM is evolving. I have not had the chance to use Cisco Duo's conversational AI interface for administration tasks. Everything now is AI-enabled, but the government is very cautious about that. It is a switch that you can turn off and turn on if you want it. The passwordless environment has been the subject of a huge debate about passwords. I even gave a presentation with the Department of Energy, and they did not like the way I presented it. I made a joke and said, 'With passwords, you need to extract the blood of the person you want to authenticate, aside from the password,' and they did not like that. They said it was too bloody. With passwordless authentication, FIDO 1, 2, and 3 are the direction everything is going. Everything is keys now, anywhere, and tokens. That is why Oracle IAM was dropped from the equation. Cisco Duo is hybrid. First, they want to see it on-premises, and from there, it evolves because of the way things are deployed. They start with the application, the databases are on-premises, and then the applications are moved to the cloud. That becomes a hybrid situation, and then one by one, the databases are transported to the cloud. When you work on government projects, everything is there with Cisco Duo. AWS, Azure, GCP, and Oracle FedRAMP are all available. It is multi-cloud. I would rate this review a 9 overall.
Network Operations Engineer at a media company with 1,001-5,000 employees
MSP
Top 5
Jan 26, 2026
The increase in phishing attacks is noticeable, as they appear to increase daily. My advice for others looking to implement Cisco Duo is that if they already have an existing solution and want to add something, Cisco Duo would be perfect. If they want to start from scratch, they can consider Okta, and if they have a Microsoft and Azure environment, they can opt for Microsoft. However, if they predominantly work within a Cisco environment, then Cisco Duo would be the best choice. I believe Cisco Duo is worth the investment, offering a good return on investment, as it is expensive but works very well without any downtime or high maintenance, and the support is also good. Approximately 2,300 users in my company use Cisco Duo. Cisco Duo is not entirely local or global, but rather is located in one place. Cisco Duo does not necessarily require any maintenance. Cisco Duo was purchased through the Marketplace rather than directly. I gave this review an overall rating of seven out of ten.
I have not utilized the end-to-end phishing resistance feature of Cisco Duo to its full extent. I have noticed an increase in attempts to access resources illegitimately in my organization; we have two MFA products, Cisco Duo and WatchGuard, and in the logs, we see a lot of attempts. I do not know if that is an uptick in attempts, but there are definitely a lot of attempts going about. I give this review a rating of ten out of ten.
My advice to others looking into using Cisco Duo is that it is really helpful for implementing zero trust and enforcing two-factor authentication for many users. Additionally, the licensing model is one of the best features; you can purchase licenses only for the number of users you have, whether it is 50 or 20. Regardless, the web service will be available without needing to worry about upgrades or maintenance. I evaluate the integration of comprehensive identity security into Cisco Duo's IAM solution as effective in defending against modern threats. I give this product a rating of 10.
Head of Network And Security at BLUEPRINT BUSINESS TECHNOLOGY
Real User
Top 5
Nov 18, 2025
I am still working with Cisco products, and I still have the same portfolio. I don't work with the Cisco Secure Access product as I'm more focused on the enterprise infrastructure of routers, switches, SD-WAN, and data center. However, it's part of what I do, though not much of a call with respect to security, but it's something I'm interested in. I need to know what it does and if I can propose it to my clients. I know Cisco Duo and have used it. It's not really a feature I handle regarding Cisco Duo's unified identity intelligence facilitating the understanding of user behavior. The security team handles that, and I don't have much visibility; it's purely transparent to me. However, I've heard them talk about it, and it really helps them to understand user behavior, mobility, and what they do on the network. I would rate this review an overall eight out of ten.
Information Technology Contractor at Insight global
Real User
Top 5
Nov 13, 2025
I am currently between jobs or contracts, but I believe for the MFA administrator, it would help if they set up the filters for gathering the data. Cisco Duo seems very scalable. In my experience, I started with a small-medium business, and in my last contracting position, it was a large one for a major worldwide airline that had hundreds of thousands of devices that could use Cisco Duo, and it scaled very well. The administrative site was also very easy to navigate for locating people and devices. I also have a background in computer asset management, so I have the skill set to locate device records easily. I have given this review an overall rating of 10.
Java Software Developer at a consultancy with 10,001+ employees
Real User
Top 10
Jun 11, 2025
We have a few employees using the traditional way of accessing and securing, which had some challenges; before the solution, people put a lot of effort in, and that's one advantage we have using Cisco Duo. The flexibility and integration of Cisco Duo were a big advantage when selecting it over other solutions, and specifically, we can introduce user-level security for specific databases. My experience with performance, cost, support, and scalability is that performance is quite good, and I do not see any issues with scalability. My experience with deploying Cisco Duo is positive; we got good support from Cisco. I would definitely recommend it to other organizations considering Cisco Duo. I would rate Cisco Duo overall a nine.
Senior Network Engineer at a educational organization with 1-10 employees
Real User
Top 5
Jun 9, 2025
We haven't started using any new features or functionalities in Cisco Duo recently as we just rolled it out. We are currently using basic features. We're looking to do more with it as part of the process. Having a complete passwordless environment in our company would lead to less pushback from people who don't necessarily want MFA. It makes it simpler for them and smooth. I do not utilize the feature called Advanced Identity Threat Detection and Response. I don't know enough about Cisco Identity Intelligence capability to detect and respond to identity-based risks effectively. I have seen yet not used Duo's conversational AI interface for admin tasks. I would rate Cisco Duo overall at a nine out of ten. It's hard to be a ten, however, I don't have anything at the moment that they could improve.
Infrastructure Engineer at a government with 501-1,000 employees
Real User
Top 10
Jun 9, 2025
Single sign-on would make things easier. We have a lot of different departments. They all have different needs. They use a lot of different programs. Single sign-on will be helpful for us. Cisco Identity Intelligence’s capability to detect and respond to identity-based risks effectively is very good. We're exploring using that a little bit more. It's always great to be able to look through and see if people's devices are out of date and things like that, for addressing security concerns. My advice to other organizations considering Cisco Duo is to do it. It's easy and was the option that fitted our needs the best. It was also painless. What more can we ask for? I would rate Cisco Duo a nine out of ten.
Chief Technology Officer at University of Redlands
Real User
Top 5
Jun 9, 2025
Other than the verified push, my company has not really started using any new features or functionalities in Cisco Duo recently, but we are looking at going to a more zero-trust type of setup. We've been looking at how to leverage Cisco Duo better without hugely increasing the expense of our authentication systems. Currently, we have it integrated with Entra ID and our Active Directory environment. We are looking at how we can expand that out and improve our security on campus. We have been with various vendors for a complete passwordless environment, and we've tried doing it with Entra ID but have run into challenges with some vendors that still require a password in their SAML authentications. I haven't really validated the Cisco Duo portion of it yet, and I'm not sure what all that entails at this point. I know it can be done, but we haven't implemented it yet. I would rate Cisco Duo a ten out of ten.
Network Engineer at West Kentucky Rural Electric Cooperative Corporation, Inc.
Real User
Top 5
Jun 9, 2025
Our experience with Duo's strong security authentication system when logging in has been moderate. It is a people problem because you have to get people educated and up to speed on how to do things and how to set up their tokens and get everything situated. Once it is all said and done, it is not complicated, but you have got to get people educated on how to make this stuff work. My advice to other organizations considering Cisco Duo is to make sure of the products you want to support and how they integrate the MFA functions before you consider it. Because if your products do not support it, it may not do you as much good as you want. If they do support it, it is a great way to add additional layers of security, not only to your computers but website logins and other avenues of hardware protection. I would rate Cisco Duo an eight out of ten.
Director, Customer Success at a tech consulting company with 1,001-5,000 employees
Real User
Top 10
Jun 9, 2025
The benefit of having a complete passwordless environment is more of a conversation that we have with our clients. There is ease of use. We focus on what outcomes they are trying to achieve with the different personas they're using and the security protection in their workplace. There aren't any disadvantages to the passwordless environment, but it all boils down to what our customers are saying about the product that we sell to them. I haven't heard anything negative about Cisco Duo. I would rate Cisco Duo overall an eight out of ten.
Identity and Access Management Principal at Mobily
Real User
Top 5
Apr 15, 2025
Cisco Duo is not very customizable but is suitable for newer or smaller organizations. For older or larger organizations, the ROI might be less due to the lack of customization. Overall, I would rate the solution seven out of ten.
Senior Information Security Engineer at DAAC System Integrator
Reseller
Top 10
Jan 14, 2025
We did not find any issues. The clients who want to acquire this product need to change something in the security infrastructure by implementing MFA security authentication, like Duo, and so on. My overall rating for the solution is ten out of ten.
The platform plays a crucial role in supporting our organization's remote access security needs by serving as the secondary email security for our VPN, thereby enabling secure remote access for our employees. It has continuously evolved by introducing new solutions and products to address emerging security threats in our industry, demonstrating its commitment to staying ahead of evolving security challenges. If the pricing aligns with their budget, I recommend considering Cisco Duo for its robust security features and scalability. It is highly adaptable and scalable, making it suitable for organizations of various sizes within the industry. Thus, there are no significant considerations to be made regarding infrastructure compatibility. I rate it an eight out of ten overall.
Cisco Duo effectively safeguards against customer factors, such as unauthorized access attempts or server breaches. It provides a high level of protection, ensuring only authorized individuals have access to the environment. I am confident in its security features. I would rate it 8 out of 10.
Telecom Engineer at a university with 1,001-5,000 employees
Real User
Aug 3, 2023
To advise somebody about Duo Security, I would say it works. It works. I have not experienced another security program like Duo Security. I don't have a way of rating it other than to say, I'm happy with how it works, and it makes my job easier. I'll give it a 9.25 out of ten.
Network Technician at a comms service provider with 11-50 employees
Real User
Jun 15, 2023
To someone researching this solution who wants to improve cybersecurity in their organization, I'd say that definitely give it a look. It's easy to set up. It was very easy for us to set up. We even had our Cisco team call us and make sure we had everything going. It was almost no effort, so it's worth a try. I'd rate Duo Security a ten out of ten.
Director of Product at a tech company with 51-200 employees
Real User
Jun 15, 2023
Duo Security's add-in value lies in its access security for establishing trust for every access request, no matter where it comes from. However, when I say "no matter where it comes from," it's not just about computer logins or VPNs; physical access requests are equally important. It covers both cybersecurity and physical security aspects. While Duo Security adds value to both areas, it's worth noting that it doesn't fully cover the physical security aspect, which is the focus of our integration. However, in terms of digital security, it is indeed effective. Now, if someone is considering getting Duo Security, my recommendation would depend on their specific needs and reasons for wanting it. However, if their goal is to implement multifactor authentication, then absolutely, they should go for it. Overall, I would rate the solution a nine out of ten.
I give Duo Security a nine out of ten. For those who want to enhance their cybersecurity, Duo Security is an excellent initial step. It enables individuals to eliminate easily exploitable vulnerabilities and embark on their security strategy journey. This journey cannot be completed in a single day, but Duo will assist in taking that crucial first step. For those currently evaluating Duo Security, I encourage them to take advantage of the free trial. They can sign up at little or no cost and try the product to assess its feature sets and availability. Utilize this opportunity to thoroughly test and explore the product and make use of the available documentation. It's an excellent method to gauge the capabilities of Duo Security.
Since I'm not an admin, I don't know how the device gets set up. The product is pretty good at securing our infrastructure. It protects everything and hardly leaves anything open. The infrastructure is secured. Duo Security cannot do it all when it comes to reducing the risk of breaches. It can probably provide up to 50%, and the rest depends on the user. Things like phishing emails depend on the user. There is nothing that Duo Security can't do. The product does a pretty good job of protecting the infrastructure. Duo Security’s user authentication and device verification are very good and very reliable. When we get a message to upgrade, we upgrade the tool. I don't have to spend a lot of time to get the device up to date. The solution is reliable for establishing trust for every access request. It definitely is able to establish trust for the identity to protect the infrastructure. Our organization doesn’t necessarily believe that all resources must be considered external. We try to strike a balance between convenience and security. We don't treat everything as external. We keep certain internal stuff that doesn't have to go through the authentication. The product increases the awareness of the employees about cybersecurity. Every time I log in, a Duo box pops up saying that I am authenticated and not leaving everything wide open. Try it and get a trial base, and then you will see the difference the tool can make. Duo is the first platform that we used. My organization did an analysis to see how many potential attacks we'll have and how much money will be lost if we do not deploy Duo. I am not sure about the metrics, though. Overall, I rate the product a nine out of ten.
VP Enterprise Architect at a financial services firm with 5,001-10,000 employees
Real User
Jun 15, 2023
Duo Security Self-Service Portal has significantly helped free up our IT staff for other projects. Instead of managing thousands of accounts across hundreds of SaaS applications, it's all in one spot now. Duo Security has probably saved us four or five hours at least. I think Duo Security does a great job of establishing trust for every access request, no matter where it comes from. It is very important for our organization that the solution considers all resources to be external because it frames the activity as zero trust, and that's how we run our network to zero trust across the board. So when you treat all resources as external, we want to lock them down every time and not just have random passwords floating everywhere. Duo Security will significantly simplify the life of someone who wants to improve cybersecurity in their organization, and they should definitely try it. Overall, I rate Duo Security ten out of ten.
IT Director at a non-profit with 201-500 employees
Real User
Jun 15, 2023
To someone researching this solution who wants to improve cybersecurity in their organization, I'd say that it has been very beneficial. Overall, I'd rate Duo Security a ten out of ten.
Network Engineer at a healthcare company with 51-200 employees
Real User
Jun 14, 2023
I would rate the solution a nine out of ten. Duo Security can get spotty at the back end but it doesn't break. It would be great if I could use the product to log into the routers or switches in the infrastructure. We already have Active Directory enabled in our routers and switches. However, if we could do two-factor authentication, then it could go a long way since no one's getting into them unless you want them to. We are all for more security in healthcare.
Network Engineer at a computer software company with 5,001-10,000 employees
Real User
Jun 14, 2023
Most solutions do what we're trying to use Duo Security for. It ensures a person has different access to the system via a different device like a YubiKey. Duo Security has helped to improve our organization's security posture through reassurance in giving out access. Having something like Duo Security on the back end can help pinpoint who's logging in and ensure there is no random bot. I highly recommend Duo Security because it's still seamless from my standpoint. I don't know how it would be on the back end, but it'd be a great application for any organization wanting to heighten its security on user access. Overall, I rate Duo Security ten out of ten.
Solutions Architect at a mining and metals company with 1,001-5,000 employees
Real User
Mar 29, 2023
My advice to you if you are evaluating Duo Security would be to do your research and compare it to other competitors. If you are a Cisco-oriented company, you will see that there are several benefits to using Duo Security. You will also see that it has the edge over other solutions on the market. On a scale from one to ten, I would rate Duo Security at eight. The stability and user experience are great, but there's room for improvement in terms of text message and SMS delivery.
Duo Security is very helpful and fits what we were looking for to satisfy the requirements of our security office. On a scale from one to ten, with ten being the best, I would rate Duo Security at eight.
Network Administrator at a retailer with 1,001-5,000 employees
Real User
Aug 5, 2022
Definitely take the end user process or perspective into account when trying to choose something. I feel like that will make or break a product. We did VPN. Network connectivity was a requirement for VPN. In that regard, it would be easy. I would rate it as nine out of 10.
Resilience security is all about business continuity. Resilience is an expected function of that, which is necessary and not optional. For businesses wanting to build more resilience, I would say, "Keep it simple," and fewer moving parts is better. That is one of the reasons that we ultimately moved away from Duo. Not because anything was wrong with it, but we could collapse two functions down into one. I think simplicity is really critical. It reduces the amount of time our staff has to spend on it, making things easier. Simplicity would be my number one reason for building resilience into an organization. It allows you to understand better how you are dealing with threats and more simply respond to threats. We are a valued reseller who works with Cisco and other vendors. We are primarily a Cisco networking shop across eight locations with 120-odd users who are mostly working from home or at least part-time working from home post-COVID. We have two major offices, a small data center, and five other locations, which are all remote access, using Cisco DMVPN. Microsoft is the application stack that we primarily use, plus cloud applications, and Juniper Mist for our wireless. I would rate it as seven out of 10. In the world of network security, it is outstanding and very strong. I have a lot of positive things to say. I think that it needs to be much more seamlessly integrated with today's application stack.
Systems Engineer Virtualization at a engineering company with 501-1,000 employees
Real User
Jun 26, 2022
Fortunately, we haven't had to evaluate it when it comes to helping us remediate threats more quickly, but we're confident that it will. Regarding resilience in cyber security, two-factor is definitely a must-have. We're satisfied with it as far as that goes, in addition to it fulfilling our regulatory requirements. For our use case, for logins, it just works.
Senior Professional Services Engineer at a outsourcing company with 11-50 employees
Reseller
Jun 23, 2022
It is somewhat of an uphill battle to get users to buy into it, but after it gets implemented and they see how easy it is, it is a pretty seamless experience. A big challenge with end-users is that they see it as another layer that they have to remember and worry about. It is very easy to set up the application to get authenticated. Once you break that curve, it gives end users a sense of security where they know that if they're trying to sign on to Office 365 or some other application, they need to authenticate with Duo to make sure that they have the multi-factor authentication. If they saw a request come in and it wasn't them, they can deny it. Duo Security has had minimal impact on our organization, but we do have an increased feeling of security. Knowing that you have to have a certain device to authenticate into whatever you need to authenticate into gives peace of mind. It hasn't eliminated trust from our organization's network architecture, but it has added efficiencies to it. There are other things that we might put in place to make sure that we get towards a zero-trust model, but it obviously aids in achieving that end goal. It doesn't really provide single-pane-of-glass management. In terms of the security posture of an organization, Duo Security is not a one-stop solution for everything. You still need a combination of a lot of different security measures to develop the full posture, but as far as authentication is concerned, in that one layer, you get the authentication logs and easy integration with all different applications, and you also get some device insights and things like that. All of those together definitely give it points towards being a single pane of glass, but you need other security applications to make that holistic environment very security agnostic. It is one of the many key pieces that all organizations need, especially if they want to integrate with many applications. There are other solutions out there, such as from Microsoft, for multi-factor authentication. I would rate it a nine out of ten. There is always room for improvement, but for end-to-end authentication, it definitely provides a great mechanism for organizations in getting that single pane of glass.
Senior Aerospace Engineer at a manufacturing company with 10,001+ employees
Real User
Jun 15, 2022
I don't place too much value on any single product, since placing too much trust in one thing creates a single point of failure. This is just a single piece in a broader spectrum of security products to accomplish our actual goals. Building resilience is nice, but there's a point of diminishing returns when it comes to doing that. Part of my job is to help our leaders understand where that diminishing return is. The single pane of glass management is desirable, but it's like a unicorn. No single pane of glass is ever really a single pane of glass. That's something that would be nice, but it's not something I expect. Duo is a very consistent product and flexible in how it can be deployed and has good support. It's a product we're very happy with.
Network engineer at a manufacturing company with 1,001-5,000 employees
Real User
Jun 15, 2022
I would tell leaders who want to build more resilience within their organization to do it right now. It's definitely important and there are a lot of resources out there that can help them on that path. Duo helps with that. It does what it's marketed to do.
I would recommend this solution to others. I have seen it being used in large banks and there has never been a complaint about them. It is a very good solution. I rate Duo Security an eight out of ten.
IT Security manager at a energy/utilities company with 201-500 employees
Real User
May 19, 2021
If you're interested in using this solution, be sure to get the onboarding team to set everything up during the onboarding phase. Set up a proxy server if you can and get them to do everything during the onboarding phase — then you won't have any problems. Compared to the after-purchase support, the onboarding people are a lot more willing to just take over your computer and set things up for you. Overall, on a scale from one to ten, I would give this solution a rating of ten — it's the best.
Head of IT and Security at a consultancy with 11-50 employees
Real User
Mar 30, 2021
I would advise others to look at the integrations that are available and see if they can roll it out to as many applications as they can. Encourage users to use Duo Push versus the six-digit pin code that the applicant generates. I would rate Duo Security a nine out of ten.
I would recommend this solution. Duo Security is the best solution for the cybersecurity challenges that we are facing nowadays. I would rate Duo Security a ten out of ten.
Technical Specialities at a tech services company with 201-500 employees
Real User
Sep 3, 2020
On a scale from one to ten where one is the worst and ten is the best, I would rate Duo Security as a six-point-five. If I have to choose a whole number it is more of a six. I have not tested all the features extensively, so I do not know how they scale. I work on generic RSA products, so I know about all the features.
Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.
Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to...
As our organization adopts and deploys AI agents, we are not there yet in our sector, in the public sector, but pretty soon we will catch up, and I am pretty much sure we are going to be still using Cisco Duo. Cisco Duo fits as an added security layer in our broader security environment. The key capabilities beyond the MFA that led me to choose Cisco Duo as our primary identity security partner was its easy integration into our current IT infrastructure. Cisco Duo has improved our operational efficiency and reduced costs in areas such as authentication, IT support, and security operations by enhancing our security workflows; pretty much everyone is using MFA at work, making it easy for us to see who is actually accessing our network and computers. The best advice I can give to another organization considering Cisco Duo is that it is user-friendly and easier to integrate into an IT infrastructure. I would rate this review a 10.
Cisco Duo fits into my broader security environment as part of a defense-in-depth strategy. What I appreciate about Cisco Duo is that it adds that extra layer of authentication, confirming who I am. Not only does it verify who I am, but also what I have, which would be that code or the push notification that I am approving. Cisco Duo provides another layer in the cake of securing my enterprise and serves as a natural plugin to facilitate access across whatever integrated applications I may need to access. Cisco Duo has given me the ability to ensure that only specific people who need to access certain data are the people accessing it. They receive the push notification, and if they are not allowed to access that, they are not going to receive the push notification. It has helped us lock down access more granularly. Cisco Duo has helped me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform by ensuring that the person is who they really are. It makes sure that not only is it Sam from accounting accessing this tool, but they also have Sam from accounting's phone. It is not someone just pretending to be Sam or someone that Sam gave the credentials to. It ensures that only the right people are accessing the right resources at the right times. When evaluating my identity strategy, I was looking for something that is simple and easy to plug in. Since we were already a Cisco partner and client, it was a natural choice and evolution for us to adopt Cisco Duo. In the experiences we have had with clients, such as the one who had the breach, it became a natural piece to ensure a simple, easy way to lock my network down and keep the bad actors out. The key capabilities beyond MFA that led me to choose Cisco Duo as my primary identity security partner are its robust MFA functionalities. If I had to highlight something exciting that is new, I do appreciate the ability to integrate IAM as part of that. However, the key functionality remains MFA, particularly the ability to manage risky logins. It is about making sure not only does this person geographically live in the location where they are trying to access, but are they in the place they are supposed to be. For example, are they trying to access it from China, potentially compromising their Cisco Duo credentials? I would see that and receive a secondary layer of protection because Cisco Duo detects the unusual access attempt and prompts for further authentication from the administrator. My advice to other companies considering Cisco Duo is that they should have had it in yesterday. It is essential to get all of the rich feature benefits out of it. If they are only using it as an MFA tool, they should look for ways to start integrating it into SSO to facilitate seamless authentication across SaaS or on-premises applications with that capability in Duo. Additionally, I recommend exploring features such as risky logins and ensuring they are accessing the full breadth of what they are paying for. I would rate this solution overall as a ten out of ten.
If Cisco Duo were removed by some chance, it would be a major impact. If it were removed without another solution, we would be going backwards, which would not be a good situation. When evaluating my identity strategy, I was looking for a standalone MFA tool, and Cisco Duo was the best fit for our organization since we use Cisco products across our environment. I believe there is much we can learn about what Cisco Duo can do in other areas and broaden that scope. I am excited to go back and learn what more Cisco Duo can offer. I would rate Cisco Duo a 10 overall in terms of what we have wanted to use it for; it has been painless and seamless. For other companies considering Cisco Duo, from a multi-factor perspective, it is easy to implement. The platform has many connectors pre-built, making it straightforward for us to stand up. We can add applications within 30 minutes, making it a simple and efficient process to get applications onboarded. I would definitely recommend them to give it a try.
Before implementing Cisco Duo, we were concerned about authentication hijacking, as we had an incident where someone managed to gain access to our server. They provided us with the username and password, suggesting they could access it at any time. After introducing Cisco Duo, we realized that while our existing firewall provided security, Cisco Duo significantly reduces the risk of authentication hijacking. Cisco Duo works even beyond on-premises solutions, enhancing security in cloud environments. The key capabilities that led me to choose Cisco Duo extend beyond just multi-factor authentication. It serves as a module that communicates with ICE, enabling it to take actions when necessary. While Cisco's other security measures are robust, integrating Cisco Duo into our cloud systems is still a critical need. I see Cisco Duo fitting into my broader security environment as an essential security layer rather than a control point. It functions mainly as a security layer to support Cisco’s extensive range of security products, which vary and might not fully integrate with all of them. When evaluating my identity strategy, I wasn't looking for a standalone MFA tool; what I sought was a part of the broader Cisco security ecosystem. While I recognize Cisco Duo predominantly as a multi-factor authentication solution, it integrates with other security tools, making it valuable in accessing various services, though I haven't yet seen a connection between Cisco Duo and agentic AI. I would tell other organizations that even if they have existing authentication systems, they should consider Cisco Duo. It works effectively across various environments and isn't limited to operating system-based access. I would rate Cisco Duo eight out of ten, and its comprehensive capabilities are a significant advantage.
When evaluating my identity strategy, I was looking for a comprehensive identity security platform rather than a standalone MFA tool, since I am an MSP servicing multiple clients, and I prefer a solution that integrates with many different technologies as most clients have a hodgepodge of equipment. Cisco Duo's broader IAM capabilities meet those needs by just adding that extra layer of security, which is always important. I am using it as an added security layer that integrates with other security products and tools that I may have in my stack. The key capabilities beyond the MFA that led me to choose Cisco Duo as my primary identity security partner included MFA as the main one. Cisco Duo has improved my operational efficiency to reduce costs in areas like authentication, IT support, and security operations by just securing the environment. It's that extra layer; after putting MFA behind it with Cisco Duo, there's now that extra layer we can fall back on. Those threats have evolved in ways that I don't even know how to start narrowing it down; they evolve every day, and so it's just trying to keep the network as secure with multiple layers of authentication on it as much as we can put it on. Looking back, Cisco Duo helps me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform by providing another level of security. It puts another layer on everybody's accounts, so if an account is compromised, there's still that extra layer of authentication needed to get through. If Cisco Duo was removed, the impact on my ability to manage and secure access across my entire identity ecosystem would mean that, for some of the school systems that we support, we would need to find a different solution, probably Microsoft Authenticator if they have the infrastructure for it, but we would probably be scrambling to get some different authentication sources in. My advice to another organization considering using Cisco Duo is to take into account the licensing, ensuring that your environment supports it, and looking at making sure it can integrate with the different equipment you have in your environment. I would rate this product an eight overall.
If Cisco Duo were removed, it would take down the VPN connectivity for everybody, so we would have to find some way around that. The types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo include needing multi-factor authentication for the VPN because it lets people into our network remotely. We have not looked at using AI agents in our organization yet. I am using Cisco Duo as an added security layer that integrates with other security products and tools that we have in our stack. My advice to another organization that is considering using Cisco Duo is to go for it. I would rate this product an overall eight out of ten.
In terms of advice for any other companies or organizations that are considering Cisco Duo, I cannot think of any specific advice. However, in terms of reliability, we have had no issues with it, so if reliability is a huge priority for your organization, then I would definitely look towards Cisco Duo. My overall review rating for Cisco Duo is ten out of ten.
If Cisco Duo were removed, we would have to scramble to migrate to another solution such as Azure or something else, some other sort of MFA. The types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo usually refer to some sort of phishing or spear phishing campaign via email, which is the majority of the attacks that we see. More recently, there are other vectors through personal space that we see. I think Cisco Duo helps with that because if there are situations where people use shared passwords, it will help protect against that. As my organization adopts and deploys AI agents, we are not quite there yet, and that is something I will address. Cisco Duo has improved my operational efficiency and reduced costs in areas such as authentication, IT support, and security operations because many times it ends up coming down to the ease of use, especially for the third-party contractors we have. We cannot necessarily touch all of their devices, so we do not know how secure they are. Having the additional layer of MFA and an easier way of deploying it rather than supplying them with a token or a new phone means we can use their existing devices and the Cisco Duo application. Having that flexibility and how easy it is to deploy is really good. I have not expanded usage, and if I had, I do not believe it would have been a smooth process. My overall rating for this review is 9.
I'm sure we are running other third-party apps as well alongside Cisco Duo, but I know Cisco Duo is the main driver. If they're looking for ease of use and scalability, that's the product to go with. I would give this solution a rating of ten out of ten.
The steps my organization has taken to become more resistant to phishing attacks include migrating to non-password-based accounts through OTP passwords and biometrics, and utilizing personalized account or device-based accounts. Even if an account is compromised, a user would need to physically have that device in order to log in. Since there is no password, there is nothing to compromise. My organization is moving toward a passwordless approach. As my organization adopts and deploys AI agents, I am approaching agentic IAM to ensure these non-human identities are secure, and Cisco Duo plays a role in that strategy. This is something I am currently learning about this year. Cisco's AI guardrails allow me to assign agentic AI credentials and identify what an AI is, tracking their activity, access, and actions. Once I can do that, I can start putting together access policies that target specific AIs. This is new territory for my organization. I am just starting to implement AI agents, and I discovered this capability at Cisco Live, which is promising. When evaluating my identity strategy, I was looking for a comprehensive identity security platform. Cisco Duo's broader IAM capabilities meet those needs as they tie into Entra and are replacing many of my on-premises identity solutions. Previously, a remote user had to authenticate against a local server already within my environment to gain access, which exposed that infrastructure to outside attacks. Now I am pushing that into the cloud and can depend on Cisco for some of those protections, making the process easier. I would rate this review an eight out of ten.
The steps my organization has taken to become more resistant to phishing attacks and the contribution of Cisco Duo's broader security approach are not my area of responsibility. The types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo and how those threats have evolved are not my area either. Cisco Duo's visibility into identity-based risks has not improved my ability to manage the security of both human users and non-human users' identities across my environment because it is not my area of expertise. Key capabilities beyond MFA led to my choice of Cisco Duo as my primary identity security partner are not applicable. Data points or examples that I have are not available. I chose Cisco security because it offers the best unified partner solutions. I gave this review a rating of ten.
Cisco Duo is an excellent solution to protect our network. We preferred Cisco products more than others, which were the factors that led to the change. I chose Cisco security because we have extensive time working with Cisco as a partner. The key capabilities beyond the MFA that led me to choose Cisco Duo as my primary identity security partner are because we have a good experience using Cisco products. I would rate this review a 10 out of 10.
Regarding Cisco Duo's adaptive authentication feature, I do not use that. I would describe my experience with deploying Cisco Duo as positive. I am on a different team that does not really deal as much hands-on with the deployment of it. I more or less just see the end-user effects of it, and so far, it seems as though everybody has adapted very well to it. To my knowledge, there were no challenges faced with the deployment of Cisco Duo. My advice to another organization that is considering Cisco Duo is that it works and benefits our community. I would suggest that you look at what fits your organization the best, and I would try my best to explain how it has worked for us. I would rate my overall experience with this product an 8.
I use Cisco Duo's adaptive authentication feature. From my perspective on the network side, I do not think Cisco Duo's dashboards really apply to me; that is something that our security side handles. I have not used Cisco Duo's push notification method on my side, but I know there are other teams that have, and they definitely prefer it. Right now, I do not think there is anything about Cisco Duo that I would improve; I have been happy with everything so far. My advice for organizations considering Cisco Duo is to implement the service quickly. I would rate this review a 9 out of 10.
I do not assess the impact of Cisco Duo's dashboards on identifying security vulnerabilities because I do not look at them; I am just an end user of the product and do not use it from that respect, so I am not part of the IT team that analyzes that particular telemetry. I do not use Cisco Duo's adaptive authentication feature. I use Cisco Duo's push notification method, and it has improved authentication times across platforms by being faster. I would rate this product a 10.
We weren't using another solution to address similar needs prior to adopting Cisco Duo, as it was our first foray into this area, and it's a good thing, so we're not looking at anything else. I've been a proponent of Cisco for a long time, as I trust their products and know my team trusts their products, which is why I choose Cisco Security at the end of the day. If I had to rate Cisco Duo, I would probably give it a 9 out of 10 because it's really good and close to perfect, but everything can be improved so I can't give it that coveted 10 out of 10. For other companies considering it, I would advise them to take a staged rollout approach for success. I would rate this review a 9 out of 10.
I rate Cisco Duo overall as ten out of ten. The reason I rate Cisco Duo that way is that it is easy to use, effective, affordable, and scalable.
I rate Cisco Duo overall as a 10 out of 10 and my advice to other organizations considering Cisco Duo is to implement it. I was not part of the pricing, setup costs, and licensing decisions, but I know the person who was involved, and they did not have any issue with it. I give this review an overall rating of 10.
The impact of Cisco Duo's dashboards on identifying security vulnerabilities is assessed by our security team. Cisco Duo's trusted endpoint device capabilities have not necessarily helped improve our organization's security policies, but it is a trusted remote location, which has made it very streamlined. We do use Cisco Duo's push notification method, but the way we have it implemented does not trigger very often, so I cannot say it has had a huge impact on authentication time across platforms. The effectiveness of Single Sign-On in reducing login complexities for our users is excellent simply because it is one set of authentication, so we are not having thousands of logins each day. I would rate this review a ten out of ten.
The advice I would give to another organization considering using Cisco Duo is to start small and then scale out. Make sure you have all the kinks and all the bugs settled within ten to one hundred users before going to a grand scale. I would rate this product overall as ten out of ten.
I do use Cisco Duo's push notification method. I would rate this review 9.5.
The question about the impact of Cisco Duo's dashboard on identifying security vulnerabilities goes to our security team. Cisco Duo's trusted endpoint devices capabilities are most likely not part of my responsibility in helping to improve our organization's security policies. I would say to another organization considering using Cisco Duo that it is very reliable and comfortable; Cisco Duo is very easy to manage, and I would recommend it 100%. I would rate this product a 10 out of 10.
I assess the effectiveness of single sign-on as a necessity; we can't have people barely manage one password, let alone four or five. I would rate this review an overall eight out of ten.
We have been using Cisco Duo for about three years now, but it is longer than that before we kind of implement everything and make it work for everybody. It is still a work in progress for us right now. Looking back, the biggest impact Cisco Duo has had on our company is enhancing our security posture. While there were initial concerns about the additional login steps, the importance of Cisco Duo for security is now more evident, particularly as we utilize it mainly for VPN access right now, while gradually moving towards supporting any end-user devices within our community. When we first evaluated Cisco Duo, we were primarily looking for a multi-factor authentication solution, but we are also exploring other features that Cisco Duo can offer within the company. I think it is a good product, though we are not using it to its full value yet. Regarding our company's adoption of AI agents, we are not really implementing much on the AI side yet. I know we are working on ensuring that the AI features are secure, but I do not think we have touched much on Cisco Duo within the AI context, which is something we can look into. For phishing attacks, we have our email filter, which is not directly related to Cisco Duo, but that is the route we have right now. With Duo, it is just for them to log in, while we focus on more of the email filter for phishing attacks. I have been mainly concerned about email phishing or credential-based attacks, as many people are not really aware or computer literate enough to know which emails will affect them or which emails are useful. They tend to click whatever they want, which then leads to issues. With Cisco Duo, the impact is knowing that it is them logging in instead of somebody else. Overall, I think Cisco Duo is a good product, and I hope that everyone looks into improving security measures, whether for companies or personal use. I would rate this review ten out of ten.
The biggest impact for our company if Cisco Duo were removed today would be a loss of MFA. The biggest impact would be the loss of that multi-factor authentication and the ease of use of multi-factor authentication for the company. It has changed our ability to detect and respond to identity-based risks because of the observability that Cisco Duo provides. We get to see all of those logs, all the authentication logs. If we see all of the extra users that are getting hit, then we can act accordingly. This information comes from the GUI on Cisco Duo. If we actually go to the proxy auth logs, then we even get further detailed information on those attempts. Our biggest impact from Cisco Duo is probably the security side. Being able to implement that multi-factor authentication. User experience is going to be an ongoing journey with everybody. As we continue on, it becomes easier for MFA. But for companies that are slow to implement MFA, the culture can be slow to adopt. Our primary objective was multi-factor authentication on the identity side. As soon as we sync AD, it allows us to immediately have that MFA for each user. Cisco Duo is much broader than just an MFA product. What we use it for in our use case at the time we implemented it was primarily for MFA. Cisco Duo is much more than an MFA product because of the applications you can integrate and single sign-on. If you have any other applications that you want to single sign on, you can set that up either as its own identity provider or through the applications in Cisco Duo portal. I would rate Cisco Duo at least an eight out of ten. My advice would be if you want something straightforward and simple for an MFA solution, choose Cisco Duo as it has simple installation, is quick, and just works.
I would rank Cisco Duo as a 10 because we haven't had any issues with it. It's worked well for us. It's fairly easy to use, and our end users appreciate it. I would recommend Cisco Duo personally, based on my experience and seeing the things it can do with the implementations that you can make with it. I would recommend it for sure. My overall rating for Cisco Duo is 10.
I have experience with Cisco Duo. I have been quite satisfied with Cisco Duo. The implementation of Cisco Duo is straightforward. I am a customer of Cisco. I would rate this product seven out of ten overall.
My advice to others looking into using Cisco Duo is that they can go for the product. I would rate this product a 9.
My overall experience with Cisco Duo comes from working on the product from 2019 through 2020 and on and off for around three and a half to four years total. I am a service provider for Cisco as an MSP. My role was a partner as part of a couple of our SGOs in Deloitte. We had an alliance partnership where we offered services, advised, implemented, and operated for clients. We also worked with Cisco to package different solutions and position them to clients after running assessments to improve their security posture. Cisco Duo can be used for centralizing identity and access management across different business units and locations, integrating remote access VPN with identity systems, creating role-based access controls, implementing MFA and phishing resistant authentication, and conducting security assessments to identify gaps and improve security posture. Some positive features about Cisco Duo include deep integration with other Cisco products, phishing resistant MFA with Talos Threat Intelligence enrichment, identity intelligence for behavioral analysis and access control, cloud-based SaaS delivery eliminating on-premises infrastructure costs, and stable performance with well-planned maintenance windows. Cisco Duo has not been adopted by a very large set of enterprises compared to competitors like Okta and Azure Entra ID, which represents a significant area for improvement. The overall review rating I would give for Cisco Duo is seven.
I have experience with Cisco Duo across different IGA and IAM security products including Oracle IAM, Okta, SailPoint, Ping, Cisco Duo, Active Directory, and Entra ID, which is Microsoft's offering. My experience with Cisco Duo's strong security authentication system has been good. It is seamless and easy to integrate. It is flexible. Cisco Duo's IAM is evolving because it now includes AI. I am not sure if I have fully used OAuth, the authorization component. I think it is there, but I just have not fully played with it. The OAuth, OpenID, and SAML are all present, but this IAM is evolving. I have not had the chance to use Cisco Duo's conversational AI interface for administration tasks. Everything now is AI-enabled, but the government is very cautious about that. It is a switch that you can turn off and turn on if you want it. The passwordless environment has been the subject of a huge debate about passwords. I even gave a presentation with the Department of Energy, and they did not like the way I presented it. I made a joke and said, 'With passwords, you need to extract the blood of the person you want to authenticate, aside from the password,' and they did not like that. They said it was too bloody. With passwordless authentication, FIDO 1, 2, and 3 are the direction everything is going. Everything is keys now, anywhere, and tokens. That is why Oracle IAM was dropped from the equation. Cisco Duo is hybrid. First, they want to see it on-premises, and from there, it evolves because of the way things are deployed. They start with the application, the databases are on-premises, and then the applications are moved to the cloud. That becomes a hybrid situation, and then one by one, the databases are transported to the cloud. When you work on government projects, everything is there with Cisco Duo. AWS, Azure, GCP, and Oracle FedRAMP are all available. It is multi-cloud. I would rate this review a 9 overall.
The increase in phishing attacks is noticeable, as they appear to increase daily. My advice for others looking to implement Cisco Duo is that if they already have an existing solution and want to add something, Cisco Duo would be perfect. If they want to start from scratch, they can consider Okta, and if they have a Microsoft and Azure environment, they can opt for Microsoft. However, if they predominantly work within a Cisco environment, then Cisco Duo would be the best choice. I believe Cisco Duo is worth the investment, offering a good return on investment, as it is expensive but works very well without any downtime or high maintenance, and the support is also good. Approximately 2,300 users in my company use Cisco Duo. Cisco Duo is not entirely local or global, but rather is located in one place. Cisco Duo does not necessarily require any maintenance. Cisco Duo was purchased through the Marketplace rather than directly. I gave this review an overall rating of seven out of ten.
I have not utilized the end-to-end phishing resistance feature of Cisco Duo to its full extent. I have noticed an increase in attempts to access resources illegitimately in my organization; we have two MFA products, Cisco Duo and WatchGuard, and in the logs, we see a lot of attempts. I do not know if that is an uptick in attempts, but there are definitely a lot of attempts going about. I give this review a rating of ten out of ten.
My advice to others looking into using Cisco Duo is that it is really helpful for implementing zero trust and enforcing two-factor authentication for many users. Additionally, the licensing model is one of the best features; you can purchase licenses only for the number of users you have, whether it is 50 or 20. Regardless, the web service will be available without needing to worry about upgrades or maintenance. I evaluate the integration of comprehensive identity security into Cisco Duo's IAM solution as effective in defending against modern threats. I give this product a rating of 10.
I am still working with Cisco products, and I still have the same portfolio. I don't work with the Cisco Secure Access product as I'm more focused on the enterprise infrastructure of routers, switches, SD-WAN, and data center. However, it's part of what I do, though not much of a call with respect to security, but it's something I'm interested in. I need to know what it does and if I can propose it to my clients. I know Cisco Duo and have used it. It's not really a feature I handle regarding Cisco Duo's unified identity intelligence facilitating the understanding of user behavior. The security team handles that, and I don't have much visibility; it's purely transparent to me. However, I've heard them talk about it, and it really helps them to understand user behavior, mobility, and what they do on the network. I would rate this review an overall eight out of ten.
I am currently between jobs or contracts, but I believe for the MFA administrator, it would help if they set up the filters for gathering the data. Cisco Duo seems very scalable. In my experience, I started with a small-medium business, and in my last contracting position, it was a large one for a major worldwide airline that had hundreds of thousands of devices that could use Cisco Duo, and it scaled very well. The administrative site was also very easy to navigate for locating people and devices. I also have a background in computer asset management, so I have the skill set to locate device records easily. I have given this review an overall rating of 10.
The solution can be used by private customers. I would rate this solution as nine out of ten.
We have a few employees using the traditional way of accessing and securing, which had some challenges; before the solution, people put a lot of effort in, and that's one advantage we have using Cisco Duo. The flexibility and integration of Cisco Duo were a big advantage when selecting it over other solutions, and specifically, we can introduce user-level security for specific databases. My experience with performance, cost, support, and scalability is that performance is quite good, and I do not see any issues with scalability. My experience with deploying Cisco Duo is positive; we got good support from Cisco. I would definitely recommend it to other organizations considering Cisco Duo. I would rate Cisco Duo overall a nine.
We haven't started using any new features or functionalities in Cisco Duo recently as we just rolled it out. We are currently using basic features. We're looking to do more with it as part of the process. Having a complete passwordless environment in our company would lead to less pushback from people who don't necessarily want MFA. It makes it simpler for them and smooth. I do not utilize the feature called Advanced Identity Threat Detection and Response. I don't know enough about Cisco Identity Intelligence capability to detect and respond to identity-based risks effectively. I have seen yet not used Duo's conversational AI interface for admin tasks. I would rate Cisco Duo overall at a nine out of ten. It's hard to be a ten, however, I don't have anything at the moment that they could improve.
Single sign-on would make things easier. We have a lot of different departments. They all have different needs. They use a lot of different programs. Single sign-on will be helpful for us. Cisco Identity Intelligence’s capability to detect and respond to identity-based risks effectively is very good. We're exploring using that a little bit more. It's always great to be able to look through and see if people's devices are out of date and things like that, for addressing security concerns. My advice to other organizations considering Cisco Duo is to do it. It's easy and was the option that fitted our needs the best. It was also painless. What more can we ask for? I would rate Cisco Duo a nine out of ten.
Other than the verified push, my company has not really started using any new features or functionalities in Cisco Duo recently, but we are looking at going to a more zero-trust type of setup. We've been looking at how to leverage Cisco Duo better without hugely increasing the expense of our authentication systems. Currently, we have it integrated with Entra ID and our Active Directory environment. We are looking at how we can expand that out and improve our security on campus. We have been with various vendors for a complete passwordless environment, and we've tried doing it with Entra ID but have run into challenges with some vendors that still require a password in their SAML authentications. I haven't really validated the Cisco Duo portion of it yet, and I'm not sure what all that entails at this point. I know it can be done, but we haven't implemented it yet. I would rate Cisco Duo a ten out of ten.
Our experience with Duo's strong security authentication system when logging in has been moderate. It is a people problem because you have to get people educated and up to speed on how to do things and how to set up their tokens and get everything situated. Once it is all said and done, it is not complicated, but you have got to get people educated on how to make this stuff work. My advice to other organizations considering Cisco Duo is to make sure of the products you want to support and how they integrate the MFA functions before you consider it. Because if your products do not support it, it may not do you as much good as you want. If they do support it, it is a great way to add additional layers of security, not only to your computers but website logins and other avenues of hardware protection. I would rate Cisco Duo an eight out of ten.
The benefit of having a complete passwordless environment is more of a conversation that we have with our clients. There is ease of use. We focus on what outcomes they are trying to achieve with the different personas they're using and the security protection in their workplace. There aren't any disadvantages to the passwordless environment, but it all boils down to what our customers are saying about the product that we sell to them. I haven't heard anything negative about Cisco Duo. I would rate Cisco Duo overall an eight out of ten.
Cisco Duo is not very customizable but is suitable for newer or smaller organizations. For older or larger organizations, the ROI might be less due to the lack of customization. Overall, I would rate the solution seven out of ten.
We did not find any issues. The clients who want to acquire this product need to change something in the security infrastructure by implementing MFA security authentication, like Duo, and so on. My overall rating for the solution is ten out of ten.
I would recommend Cisco Duo for its reliability, stability, and ease of implementation. I'd rate the solution eight out of ten.
The platform plays a crucial role in supporting our organization's remote access security needs by serving as the secondary email security for our VPN, thereby enabling secure remote access for our employees. It has continuously evolved by introducing new solutions and products to address emerging security threats in our industry, demonstrating its commitment to staying ahead of evolving security challenges. If the pricing aligns with their budget, I recommend considering Cisco Duo for its robust security features and scalability. It is highly adaptable and scalable, making it suitable for organizations of various sizes within the industry. Thus, there are no significant considerations to be made regarding infrastructure compatibility. I rate it an eight out of ten overall.
Cisco Duo effectively safeguards against customer factors, such as unauthorized access attempts or server breaches. It provides a high level of protection, ensuring only authorized individuals have access to the environment. I am confident in its security features. I would rate it 8 out of 10.
I would rate Cisco Duo Security an eight out of ten.
To advise somebody about Duo Security, I would say it works. It works. I have not experienced another security program like Duo Security. I don't have a way of rating it other than to say, I'm happy with how it works, and it makes my job easier. I'll give it a 9.25 out of ten.
It's a good product. We've been pleased with it. There are no complaints. I'd rate it a ten out of ten because I don't know what's better than this.
To someone researching this solution who wants to improve cybersecurity in their organization, I'd say that definitely give it a look. It's easy to set up. It was very easy for us to set up. We even had our Cisco team call us and make sure we had everything going. It was almost no effort, so it's worth a try. I'd rate Duo Security a ten out of ten.
Overall, I'd rate Duo Security a ten out of ten.
Duo Security's add-in value lies in its access security for establishing trust for every access request, no matter where it comes from. However, when I say "no matter where it comes from," it's not just about computer logins or VPNs; physical access requests are equally important. It covers both cybersecurity and physical security aspects. While Duo Security adds value to both areas, it's worth noting that it doesn't fully cover the physical security aspect, which is the focus of our integration. However, in terms of digital security, it is indeed effective. Now, if someone is considering getting Duo Security, my recommendation would depend on their specific needs and reasons for wanting it. However, if their goal is to implement multifactor authentication, then absolutely, they should go for it. Overall, I would rate the solution a nine out of ten.
I give Duo Security a nine out of ten. For those who want to enhance their cybersecurity, Duo Security is an excellent initial step. It enables individuals to eliminate easily exploitable vulnerabilities and embark on their security strategy journey. This journey cannot be completed in a single day, but Duo will assist in taking that crucial first step. For those currently evaluating Duo Security, I encourage them to take advantage of the free trial. They can sign up at little or no cost and try the product to assess its feature sets and availability. Utilize this opportunity to thoroughly test and explore the product and make use of the available documentation. It's an excellent method to gauge the capabilities of Duo Security.
Since I'm not an admin, I don't know how the device gets set up. The product is pretty good at securing our infrastructure. It protects everything and hardly leaves anything open. The infrastructure is secured. Duo Security cannot do it all when it comes to reducing the risk of breaches. It can probably provide up to 50%, and the rest depends on the user. Things like phishing emails depend on the user. There is nothing that Duo Security can't do. The product does a pretty good job of protecting the infrastructure. Duo Security’s user authentication and device verification are very good and very reliable. When we get a message to upgrade, we upgrade the tool. I don't have to spend a lot of time to get the device up to date. The solution is reliable for establishing trust for every access request. It definitely is able to establish trust for the identity to protect the infrastructure. Our organization doesn’t necessarily believe that all resources must be considered external. We try to strike a balance between convenience and security. We don't treat everything as external. We keep certain internal stuff that doesn't have to go through the authentication. The product increases the awareness of the employees about cybersecurity. Every time I log in, a Duo box pops up saying that I am authenticated and not leaving everything wide open. Try it and get a trial base, and then you will see the difference the tool can make. Duo is the first platform that we used. My organization did an analysis to see how many potential attacks we'll have and how much money will be lost if we do not deploy Duo. I am not sure about the metrics, though. Overall, I rate the product a nine out of ten.
Duo Security Self-Service Portal has significantly helped free up our IT staff for other projects. Instead of managing thousands of accounts across hundreds of SaaS applications, it's all in one spot now. Duo Security has probably saved us four or five hours at least. I think Duo Security does a great job of establishing trust for every access request, no matter where it comes from. It is very important for our organization that the solution considers all resources to be external because it frames the activity as zero trust, and that's how we run our network to zero trust across the board. So when you treat all resources as external, we want to lock them down every time and not just have random passwords floating everywhere. Duo Security will significantly simplify the life of someone who wants to improve cybersecurity in their organization, and they should definitely try it. Overall, I rate Duo Security ten out of ten.
To someone researching this solution who wants to improve cybersecurity in their organization, I'd say that it has been very beneficial. Overall, I'd rate Duo Security a ten out of ten.
I would rate the solution a nine out of ten. Duo Security can get spotty at the back end but it doesn't break. It would be great if I could use the product to log into the routers or switches in the infrastructure. We already have Active Directory enabled in our routers and switches. However, if we could do two-factor authentication, then it could go a long way since no one's getting into them unless you want them to. We are all for more security in healthcare.
Most solutions do what we're trying to use Duo Security for. It ensures a person has different access to the system via a different device like a YubiKey. Duo Security has helped to improve our organization's security posture through reassurance in giving out access. Having something like Duo Security on the back end can help pinpoint who's logging in and ensure there is no random bot. I highly recommend Duo Security because it's still seamless from my standpoint. I don't know how it would be on the back end, but it'd be a great application for any organization wanting to heighten its security on user access. Overall, I rate Duo Security ten out of ten.
My advice to you if you are evaluating Duo Security would be to do your research and compare it to other competitors. If you are a Cisco-oriented company, you will see that there are several benefits to using Duo Security. You will also see that it has the edge over other solutions on the market. On a scale from one to ten, I would rate Duo Security at eight. The stability and user experience are great, but there's room for improvement in terms of text message and SMS delivery.
I'd rate Duo Security an eight out of ten.
Duo Security is very helpful and fits what we were looking for to satisfy the requirements of our security office. On a scale from one to ten, with ten being the best, I would rate Duo Security at eight.
I rate Cisco Duo Security a nine out of ten. I would give the solution a perfect score if it were a little cheaper. Cisco is expensive.
Definitely take the end user process or perspective into account when trying to choose something. I feel like that will make or break a product. We did VPN. Network connectivity was a requirement for VPN. In that regard, it would be easy. I would rate it as nine out of 10.
Resilience security is all about business continuity. Resilience is an expected function of that, which is necessary and not optional. For businesses wanting to build more resilience, I would say, "Keep it simple," and fewer moving parts is better. That is one of the reasons that we ultimately moved away from Duo. Not because anything was wrong with it, but we could collapse two functions down into one. I think simplicity is really critical. It reduces the amount of time our staff has to spend on it, making things easier. Simplicity would be my number one reason for building resilience into an organization. It allows you to understand better how you are dealing with threats and more simply respond to threats. We are a valued reseller who works with Cisco and other vendors. We are primarily a Cisco networking shop across eight locations with 120-odd users who are mostly working from home or at least part-time working from home post-COVID. We have two major offices, a small data center, and five other locations, which are all remote access, using Cisco DMVPN. Microsoft is the application stack that we primarily use, plus cloud applications, and Juniper Mist for our wireless. I would rate it as seven out of 10. In the world of network security, it is outstanding and very strong. I have a lot of positive things to say. I think that it needs to be much more seamlessly integrated with today's application stack.
Fortunately, we haven't had to evaluate it when it comes to helping us remediate threats more quickly, but we're confident that it will. Regarding resilience in cyber security, two-factor is definitely a must-have. We're satisfied with it as far as that goes, in addition to it fulfilling our regulatory requirements. For our use case, for logins, it just works.
It is somewhat of an uphill battle to get users to buy into it, but after it gets implemented and they see how easy it is, it is a pretty seamless experience. A big challenge with end-users is that they see it as another layer that they have to remember and worry about. It is very easy to set up the application to get authenticated. Once you break that curve, it gives end users a sense of security where they know that if they're trying to sign on to Office 365 or some other application, they need to authenticate with Duo to make sure that they have the multi-factor authentication. If they saw a request come in and it wasn't them, they can deny it. Duo Security has had minimal impact on our organization, but we do have an increased feeling of security. Knowing that you have to have a certain device to authenticate into whatever you need to authenticate into gives peace of mind. It hasn't eliminated trust from our organization's network architecture, but it has added efficiencies to it. There are other things that we might put in place to make sure that we get towards a zero-trust model, but it obviously aids in achieving that end goal. It doesn't really provide single-pane-of-glass management. In terms of the security posture of an organization, Duo Security is not a one-stop solution for everything. You still need a combination of a lot of different security measures to develop the full posture, but as far as authentication is concerned, in that one layer, you get the authentication logs and easy integration with all different applications, and you also get some device insights and things like that. All of those together definitely give it points towards being a single pane of glass, but you need other security applications to make that holistic environment very security agnostic. It is one of the many key pieces that all organizations need, especially if they want to integrate with many applications. There are other solutions out there, such as from Microsoft, for multi-factor authentication. I would rate it a nine out of ten. There is always room for improvement, but for end-to-end authentication, it definitely provides a great mechanism for organizations in getting that single pane of glass.
I don't place too much value on any single product, since placing too much trust in one thing creates a single point of failure. This is just a single piece in a broader spectrum of security products to accomplish our actual goals. Building resilience is nice, but there's a point of diminishing returns when it comes to doing that. Part of my job is to help our leaders understand where that diminishing return is. The single pane of glass management is desirable, but it's like a unicorn. No single pane of glass is ever really a single pane of glass. That's something that would be nice, but it's not something I expect. Duo is a very consistent product and flexible in how it can be deployed and has good support. It's a product we're very happy with.
I would tell leaders who want to build more resilience within their organization to do it right now. It's definitely important and there are a lot of resources out there that can help them on that path. Duo helps with that. It does what it's marketed to do.
I rate Duo Security nine out of 10. Duo is a solid solution, but it still has some minor issues with adding users.
I would recommend this solution to others. I have seen it being used in large banks and there has never been a complaint about them. It is a very good solution. I rate Duo Security an eight out of ten.
If you're interested in using this solution, be sure to get the onboarding team to set everything up during the onboarding phase. Set up a proxy server if you can and get them to do everything during the onboarding phase — then you won't have any problems. Compared to the after-purchase support, the onboarding people are a lot more willing to just take over your computer and set things up for you. Overall, on a scale from one to ten, I would give this solution a rating of ten — it's the best.
I would advise others to look at the integrations that are available and see if they can roll it out to as many applications as they can. Encourage users to use Duo Push versus the six-digit pin code that the applicant generates. I would rate Duo Security a nine out of ten.
I would recommend this solution. Duo Security is the best solution for the cybersecurity challenges that we are facing nowadays. I would rate Duo Security a ten out of ten.
As a user, I would give Duo Security a rating of nine out of ten.
On a scale from one to ten where one is the worst and ten is the best, I would rate Duo Security as a six-point-five. If I have to choose a whole number it is more of a six. I have not tested all the features extensively, so I do not know how they scale. I work on generic RSA products, so I know about all the features.
I would rate this product a six out of 10.