Duo's multi-factor authentication (MFA) and device trust is a great start for enterprises to secure the workforce on their zero-trust journey.

As part of the Jump Start Services, Aqueduct will perform all the pre-deployment steps necessary to achieve a successful install:

License Inspection • Aqueduct Engineer will inspect all licenses for quantity and type and ensure licensure matches expected entitlement • Aqueduct Engineer will correct any licensing discrepancy including: License Application and Coordination with Cisco Licensing for any discrepancies until resolved

Conduct Environmental Review: • Ensure proper supported firmware versions on the device being protected o Upgrading firmware out of scope • Aqueduct will document and mutually collect with Customer environmental information, including but not limited to: host names, IP Addresses, device information, and all other management necessary information. o Customer will assist in filling out DUO Authentication Proxy information • Aqueduct will mutually determine location and design for Authentication proxy o There will be two nodes installed for redundancy • Provide Customer with a pre-deployment DUO Jump Start Preparation Guide to identify customer business objectives and technological requirements for the solution and gather information about the Customer’s network environment. • Review and deliver Solution Requirements Document.

Implementation Execution

Aqueduct Responsibilities • Work with customer to setup DUO portal access • Configuration of Application in the DUO portal • Installation of DUO Authentication Proxy on decided nodes • Configuration of the DUO Authentication Proxy • Configuration of network device to perform two-factor authentication via RADIUS • Testing of authentication

Customer Responsibilities • Customer to provide access to the device where the Duo Authentication Proxy will be installed • Customer to provide access to the network access device where the Duo RADIUS configuration will take place (i.e Cisco ASA, Meraki, etc.) • Customer to provide Migration Window for Go-Live • Customer to provide Service Account for Active Directory Integration