Cisco Duo - Essentials Edition

My main use case for Cisco Duo is to address the issue of MFA and secure access for users, particularly protecting remote access and cloud applications from unauthorized access.

A specific example of how I use Cisco Duo in my daily work is that we use it mainly to add an extra layer of security for remote access and cloud applications. A typical scenario is when a user tries to access a protected application or remote resource from outside the corporate network, Duo verifies their identity through MFA after the initial username and password. This helps ensure that even if a password is compromised, an unauthorized person cannot easily access company resources. We also use the MFA prompt and access control to improve our overall security for remote users.

The main use case of Cisco Duo we use is that it provides an extra layer of protection for remote users without significantly changing their normal login experience. I primarily value it for strengthening MFA, reducing the risk of compromised credentials, and improving security when users access a cloud application or company resources remotely.

The specific features of Cisco Duo that stand out most to me are the strong multi-factor authentication, ease of use, and access control capabilities. Duo makes it straightforward for users to verify their identity while giving admins better control over who can access company resources. I also find the authentication visibility and security policies useful for managing remote and cloud-based access.

Another valuable feature I find in Cisco Duo is the balance between security and user convenience. Duo provides strong MFA and access control while keeping the authentication experience simple for end users. The visibility and policy options also make it easier to monitor access and respond to potential security issues.

Cisco Duo has positively impacted our organization by improving our overall access security by adding an extra layer of protection beyond passwords. MFA helps reduce the risk of unauthorized access from compromised credentials, especially for remote users. It has also made it easier for admins to apply consistent authentication policies while keeping the login experience relatively simple for users.

Cisco Duo is generally easy to use, but there are a few areas where it could be improved. The initial setup and configuration can require some technical knowledge, especially when integrating Duo with multiple applications and different authentication methods. The administrative interface could also be more intuitive with simpler navigation and more detailed reporting and analytics in a single place. It would be helpful to have more customization and options for MFA policies and user notifications, particularly for organizations with large and diverse remote workforces. Another improvement would be making troubleshooting easier for admins by providing clearer error messages and more detailed guidance when authentication or integration issues occur. Overall, Duo is a strong solution, but improvements in admin, reporting, and troubleshooting could make it even better.

One of the main challenges I have faced with Cisco Duo is that troubleshooting can sometimes take time when there are issues with integrations, authentication methods, or user devices. It would be helpful if Duo provided more detailed troubleshooting information and clearer recommendations directly within the admin console. For larger environments, managing policies across different applications and user groups can also become more complex. Better centralized reporting, easier policy management, and more granular customizations would make the platform easier to manage. Overall, these are relatively minor challenges compared with the security benefits Duo provides, but improving the administrative and troubleshooting experience would make the solution even more effective.

I have been using Cisco Duo for about six months.

Cisco Duo is a stable platform and reliable.

Cisco Duo is highly scalable and can support organizations as they grow without requiring major changes to the underlying infrastructure.

Like any other support team, there are certain things that they can improve. One area that could be improved is response time for more complicated technical cases. It would also be helpful to have more detailed troubleshooting guidance for integration-specific issues so administrators can resolve common problems without always needing to contact support. The support is reliable, and the combination of documentation, self-service resources, and technical support provides a good experience.

Before Cisco Duo, our authentication environment relied more heavily on traditional username and password authentication and existing MFA capabilities. We moved towards Duo because we wanted a more consistent and security-focused MFA solution for remote users and cloud applications. Our main reasons were strong protection against compromised credentials, easier centralized administration, better visibility into authentication activity, and support for a broader range of access scenarios. Duo also provided a relatively straightforward user experience, which made it easier to encourage adoption of stronger authentication practices.

We have seen a positive return on investment mainly through improved security and reduced risk rather than through specific measured cost savings. Cisco Duo helps reduce the likelihood of account compromise by adding MFA, which can potentially prevent the much higher costs associated with security incidents. It has also helped streamline authentication and access management. Having a consistent MFA process makes it easier for the IT team to support users and troubleshoot authentication issues. While we have not calculated a specific dollar amount or percentage reduction in support tickets, the main ROI for us is the combination of strong account security, better control over remote access, and a more manageable authentication process.

My experience with pricing, setup cost, and licensing for Cisco Duo indicates that the main setup cost for us has been the time and effort required to integrate Duo with existing applications, authentication systems, and remote access solutions. However, once the integration and policies are configured, ongoing administration is fairly manageable. From a cost perspective, I recommend evaluating the required features and user count carefully before selecting a plan. For us, the security benefits of strong authentication and improved access control make the investment worthwhile, particularly when compared with the potential impact of an account compromise.

We considered other MFA and identity security solutions before choosing Cisco Duo. The main alternatives were solutions from established IAM and security vendors that offer MFA, conditional access, and remote access protection. Our evaluation focused on security capabilities and ease of deployment and user experience, integration with existing applications, administrative controls, and overall licensing cost. Duo stood out because of its strong MFA capabilities, a relatively simple user experience, broad integration options, and centralized administration. These factors made it a good fit for our security, remote, and cloud-based access.

On a scale of one to ten, I would rate Cisco Duo an eight out of ten. It offers strong MFA, good ease of use, and solid access control with some room for improvement in administration and reporting.

I chose eight out of ten because there is room for improvements, primarily in administration, reporting, and troubleshooting. These are the few areas where it can improve.

Regarding Cisco Duo's AI capabilities, I think it takes a security-focused approach to its AI features. From a governance perspective, the AI features operate within clearly defined access control and security policies, particularly when dealing with identity and authentication data. I value transparency around how AI features use data, what information it retains, and how administration can control or configure those capabilities. Strong privacy protections, access control, auditing, and clearer governance policies are important for building confidence in AI within an enterprise security environment. Overall, I see AI as a useful addition to Duo, but security, privacy, transparency, and administrative control should remain the priority.

I find that Cisco Duo's AI capabilities appear useful for improving security visibility and helping administrators identify and understand potential security issues. The output is generally helpful when used as an additional source of information rather than the sole basis for security decisions. One area that could be improved is providing more context behind AI-generated recommendations, including why a particular conclusion was reached and what data contributed to it. Clearer explanations and context would make the output easier for security teams to use. I consider the AI capabilities a useful part of the solution, and this can inform security decisions.

Cisco Duo is deployed in our organization primarily as a public cloud SaaS solution. This makes it convenient to protect users accessing cloud applications and remote resources without requiring us to maintain a separate on-premises MFA infrastructure. The deployment model also makes it straightforward to scale the number of users and applications as we grow. We can manage authentication policies centrally while enabling users to authenticate securely from different locations and devices.

We use Cisco Duo as a Cisco-hosted SaaS solution, so we do not directly select or manage the underlying cloud provider. The service is hosted and managed by Cisco, while we manage our Duo configuration, user authentication policies, and integrations.

I have not used Duo's conversational AI interface extensively for administration tasks yet, but my experience has primarily been with the core MFA, access policies, and administrative features. However, I see that a conversational AI interface could be useful for quickly finding configuration options, underlying authentication issues, and guiding administrators through troubleshooting steps. I view it as useful assistance while still validating any recommended configuration changes before applying them.

We have not extensively used the Advanced Identity Threat Detection and response capabilities in Cisco Duo, so I would not want to overstate our experience with the feature. Our primary focus has been on MFA, access control, and securing remote and cloud application access. However, the capabilities are valuable from a threat management perspective because detecting risky identity behavior can help security teams identify suspicious authentication activity earlier and prioritize potential threats to take appropriate action before compromised credentials result in unauthorized access.

I evaluate the benefit of having a complete passwordless environment in my organization as providing significant security benefits because it reduces the risks associated with weak, reused, or compromised passwords. It can also improve the user experience by reducing password resets and making authentication simpler with methods such as security keys or biometrics. The main challenges involve adoption compatibility. Some legacy applications may still depend on passwords, and users may need time to become comfortable with the new authentication methods. There also needs to be a reliable recovery process for situations such as lost or replaced devices. Overall, I see passwordless authentication as a strong long-term direction, particularly with MFA, device trust, and risk-based access control. A gradual rollout is usually more practical than eliminating passwords immediately.

My experience with Cisco Duo's strong security authentication system has generally been straightforward and easy. Once the initial setup is completed, the MFA process adds only a small step to the normal login experience. The push notification and other authentication options make it convenient for users to verify their identity quickly. The main challenges can occur when a user changes or loses their phone, as connectivity issues or the need to re-enroll the device may arise. In those situations, administrator assistance may be required. Overall, the additional security provided by Duo is worth the small amount of extra effort during login.

Recently, our focus has mainly been on strengthening MFA and improving access control rather than rolling out completely new Duo features. We have been making better use of Duo's authentication policies and administrative visibility to improve how we manage remote and cloud-based access. These capabilities have helped us apply more consistent security controls, monitor authentication activity, and respond more effectively when users experience access or authentication issues. We are also interested in newer capabilities around risk-based authentication and identity threat detection as potential next steps for improving our security posture.

Our organization has taken a layered approach to become more resistant to phishing attacks. This includes strengthening MFA, educating users about suspicious emails and links, and enforcing stronger authentication policies and monitoring unusual login activity. We also encourage users to report suspicious messages and provide guidance on common phishing techniques. Cisco Duo contributes by adding an extra authentication layer beyond the username and password. Even if a user's credentials are compromised through phishing, MFA makes it more difficult for an attacker to gain access to protected application resources. Duo's authentication visibility and access policies help administrators identify suspicious behavior and strengthen controls for remote users.

My advice for others looking into using Cisco Duo would be to clearly define your MFA and access security requirements before choosing a Duo plan. Start with the applications and user groups that need the most protection, especially remote users and critical cloud applications, and then expand gradually. I would also recommend planning the user enrollment and device recovery process in advance. Good communication and user training can make adoption much smoother. During the evaluation, pay attention to not only the MFA features but also to the integration, policy management, administrative experience, and security. Cisco Duo is a strong choice for strengthening identity and security, making authentication less complicated for users.

It is a pretty good platform for authentication, reliable, and it can be a valuable security platform for your MFA needs. I rated Cisco Duo an eight out of ten overall.

My main use case for Cisco Duo is multi-factor authentication. Whenever I am trying to log in to a service, Cisco Duo sends me a push notification. I use it for different services including several of my work emails, Instagram, and many different applications. Whenever I am logging in, to ensure that it is really me logging in, I have to go to Cisco Duo and approve the push that was sent, or sometimes enter the code that has been given by the application. This ensures the security of my account.

I find Cisco Duo to be easy to use for multi-factor authentication compared to other authenticators that I have used. Cisco Duo is comparatively much simpler to use than others, so intuitiveness is something that I really appreciate.

The interface is definitely easier to understand and the workflow is straightforward. Multi-factor authentication can be so challenging depending upon what authenticator you are using, as sometimes they make life unnecessarily difficult. Given that multi-factor authentication is an extra process, using other authenticators can feel much more burdensome than it should. Cisco Duo's process makes authentication much simpler. For example, even during setup, the process is really easy, and once you are set up, you do not have to battle with other authentication issues. It is just as simple as receiving a push, approving it, and that is it.

I definitely feel more secure with Cisco Duo. Based on my talks with other people and my own reflection, I feel more secure knowing I have multi-factor authentication in place. I actually feel good about using Cisco Duo rather than others. I have other authentication apps on my phone, and Cisco Duo is by far the easiest. I feel that I am using a good product that not only secures my accounts but also will not be a headache to use. When I sign into other accounts that use other authenticators, I usually experience stress or anxiety that I will have difficulty authenticating. With Cisco Duo, the process is straightforward. I log into my accounts many different times, as I am a professor and must log in repeatedly when going to different classes. It does not give me a hard time. If I cannot approve the push due to internet connectivity issues, they can send me a code, and I know there are several other options available to get authenticated. That is another good point about Cisco Duo.

Logging in with Cisco Duo's strong security authentication system has been easy for all the reasons I have explained. Definitely, having multi-factor authentication helps with phishing, and everyone uses Cisco Duo for multi-factor authentication in my organization. Having Cisco Duo helps with multi-factor authentication, which in turn helps prevent phishing emails, so there is a direct relevance there.

I think the location accuracy could use a little improvement because it does not always show the exact location from which I am signing in.

For accuracy and reliability of output, the accuracy could be more precise regarding the location from where the sign-in is occurring. Reliability is really strong. Cisco Duo offers many different options to get signed in, so I would rate reliability ten out of ten.

I have been working in my current field for the past five years.

Setup is really easy, and once you are set up, you do not have to battle with other authentication issues. It is just as simple as receiving a push and approving it.

I do not have the metrics, but regarding return on investment, I would say just by working in this field, I can honestly say that Cisco Duo has provided a return on investment based on security. We have definitely had that return because nowadays, the education domain is really targeted by malicious actors. Especially for students, who are not really concerned about security, Cisco Duo provides a layer of security, particularly for student accounts and many other users who are not explicitly concerned about security.

I chose a rating of nine out of ten for all the reasons I have told you before. I think I would say just set it up correctly and let Cisco Duo do its job. My overall review rating for Cisco Duo is nine out of ten.

The major use case for Cisco Duo is remote access VPN, which I believe is the widespread solution for remote access. I use it in combination with Cisco AnyConnect, Cisco Firepower, and Cisco Duo as an MFA solution.

Considering the biggest advantage in the product and personal preferences, simple integration is key. Cisco Duo works within a huge Cisco security ecosystem and the integration is straightforward. That is the first big advantage. As a customer, it is really simple to use because the GUI is intuitive and the application for smartphones is straightforward. Daily-based activity is also simple, with just a quick push notification.

Regarding the ease of the security authentication system, it is quite simple. You are just receiving a push notification or a one-time password.

The assessment feature, also called posture, is what I find good. It performs checks on cell phones for new updates, patches, and so on. I think that is an interesting solution.

Cisco Duo is a fully cloud-based solution. It would be beneficial if Cisco provided a fully on-premise solution. I have discussed this with the local Cisco office in Kyiv regarding any possibility to deploy on-premise, but as I understand, there are technical issues or technical aspects preventing them from deploying a full on-premise solution. The only disadvantage is that it is fully cloud-based.

When considering if additional features should be added in the future or if something is missing now, I am fully satisfied at present.

I started using Cisco Duo approximately five or six years ago, since Cisco announced its MFA product. I started using Cisco Duo specifically for remote access VPN solutions and related products.

Regarding stability and possible glitches or latency problems, I have never experienced any issues.

Regarding scalability and whether it is easy to scale or any limits faced, I have not encountered any limits in our deployment.

Cisco technical support is absolutely helpful because I have very good communication with the local Cisco office in Ukraine. The first line of support, Cisco TAC, is absolutely good with no problems or issues. In the case of emergency situations, such as P1 cases, I have the ability to contact our local colleagues in the Kyiv office to escalate our issues. Support from Cisco is absolutely good with no issues or problems.

I have used solutions similar to Cisco Duo.

Since the product is only deployed on the cloud, installation is really easy. It is really easy to deploy. In a few hours, you will have access to the cloud GUI, and a few hours are needed to complete the integration process. It is absolutely easy.

Regarding Cisco Duo's affordability for the Ukrainian market, I think it is affordable. It depends on an installation base. For a medium and mid-range market, I think it is a fully affordable price when comparing with other products and solutions.

A huge competitor in our market, especially in the Ukrainian market, is an HID product. The biggest difference between Cisco Duo and competitors is that they have an on-premise solution. That is the only difference, I believe.

Regarding the impression of Cisco Duo's Identity Intelligence capability, I do not have much experience with the capability at this time, but it provides really good visibility for information purposes. Unfortunately, I do not have enough experience with the capability to comment further.

Regarding whether a complete passwordless environment is beneficial, the major point is that you do not need to track all passwords. You need to track different passwords for different applications and solutions. You do not need to use third-party password management tools. It is really simple to provide and obtain secure access where you need it. That is the most advantageous feature of the passwordless solution.

If asked to subjectively rate support from zero to ten points, I would give it eight or nine points.

My overall rating of Cisco Duo on a scale from zero to ten is 8.5, as it is close to nine.

For primary purposes, I am using Cisco Duo as an office gateway and Wi-Fi solution.

My experience with Cisco Duo's strong security authentication system has benefited my organization; it is quite simple. It helps to manage potential threats because there are many things; if you have connected any network equipment and someone has used any third-party equipment, it will alert immediately, detecting many things which are bypassing the network equipment very well.

There is much that is helpful in having a complete passwordless environment with Cisco Duo; previously, we had a lot of password handling and saving, with people forgetting passwords, but now we do not face those problems anymore.

To improve Cisco Duo, we have some third-party hardware, and for integrations with that, we need more user-friendly integrations since third-party integration can present a lot of compatibility issues with legacy products.

In terms of deployment, Cisco Duo requires some improvement.

I have been working with Cisco Duo for the past two to three years.

Stability is one thing, and it is very stable.

We do not have any scalability issues because we only have an alerting system; we do not have any AI integrations at this time.

It takes two months to deploy the product because we have many different locations, almost 15 countries.

I would rate the technical support of Cisco as seven.

For security, we use only Cisco at this time.

Deployment of Cisco Duo was, at the beginning, a little bit tricky with the designing and all the considerations, then after that, it is very convenient to handle.

For a non-prepared, non-technical user, it could be tricky and quite complex. The implementation part is not simple as it requires many things to be taken care of before it is a stable solution.

For the part of the deployment, we hired a third-party vendor who implemented and trained us, and now we are handling that.

It is beneficial in terms of finance to use Cisco Duo with some return on investment and cost reductions in the long run.

It is a little bit expensive, but with security, we cannot compromise on it.

I have not thought of some alternatives or of switching to some other products.

I do make use of advanced identity threat detection and response features.

I am not much of a user, but we have a team to handle those things, which are the advantages of Cisco Duo.

In the past one year, we have not upgraded to any new features.

I am not much aware about Cisco Identity Intelligence, but my team looks at those things; I have very little information on that.

My overall rating for this product is seven.