Our general use cases are for multi-factor authentication for our networking and data center environment devices. We also do some SAML for our network monitoring tools with our different partners in our environment. With SAML, we use it for RADIUS and TACACS authentication.
Cisco Duo - Advantage Edition
Cisco Systems, Inc.External reviews
External reviews are not included in the AWS star rating for the product.
A multi-factor authentication offering a good dashboard while being reasonably priced
What is our primary use case?
How has it helped my organization?
The solution has definitely made our administrative access and privileged access to our data center architecture more secure by using multi-factor authentication. It's no longer just a password. You need to have Duo Push. It also helps the security team keep track of when people log in a lot easier, and you can just go to Duo Security to do that. The multi-factor aspect for us was the big reason why we chose Duo. We are Cisco, and it's integrated with Duo Security.
What is most valuable?
The administrator tool in the dashboard is the most valuable feature. It's really easy to quickly see if users are locked out from their device, firmware code, or just all the little dashboards and reports I can run to give the security for monthly reports. The dashboard's really good.
What needs improvement?
The pain point for us at one point was the Duo Authentication Proxy since we're on-premises and not in the cloud. We had to have a proxy machine that's in our DMZ to talk to Duo for us. The configuration of that was a little complicated.
For how long have I used the solution?
I have been using Duo Security in my organization's environment for eighteen months.
What do I think about the stability of the solution?
I never faced any stability issues.
What do I think about the scalability of the solution?
I never faced any scalability issues.
How are customer service and support?
The solution's technical support has been great. The only times I've ever had to call them was when I had to deal with Duo Authentication Proxy, and they were very helpful. They would go through your config and help you figure out any little pain points you're dealing with as far as integrating those different protocols, but they were fine every time I had a call. I rate the support a nine out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
Regarding implementation, it was a really quick project. I think we did PoC to the final rollout in six weeks. Duo Security is very integrated with other security and Cisco products, it took us around six weeks, and we had the solution up and running along with multi-factor authentication for all privileged access users in our environment. Previously, we just had a username and password. It was a big win for us.
What's my experience with pricing, setup cost, and licensing?
Price-wise, the solution has been very, very reasonable, especially since I like that you can scale, and they work really well if you need to expand quickly or retract. We haven't had any problems. Licensing is the last thing I think about regarding Duo Security because it's so easy, and I had no problems with it.
Which other solutions did I evaluate?
During our evaluation phase, we looked at Okta. For privileged access and for our authentication protocols like RADIUS and TACACS, Okta didn't have that functionality. They did SAML, so you could secure web apps or SaaS platforms or anything like that, but not our internal data center networking infrastructure. Duo Security was the only one that really had that capability. It was a really quick process. It's been great ever since.
What other advice do I have?
It is a very powerful tool when it comes to securing infrastructure from end to end. It makes authentications seamless for the users, and it's very well integrated with, like, Cisco ISE. It's not hard to maintain, and that was the biggest bonus. You don't want pain points for your users. Integration and the solution's seamlessness were the two big points.
Regarding my impressions of Duo Security's ability to help reduce risks and breaches, I would say that it is very high. The biggest pushing risk for us is insider threats, so mitigation requiring multi-factor authentication for privileged access reduces that threat surface. Duo Security was a really quick and really easy way to get a really quick win on that.
Duo Security's user authentication and device verification for helping to prevent and identify attacks is pretty good, especially for profiling the devices and for devices that have Duo's app in them. It helps us to understand the users of Duo about which firmware is running and whether they're possibly running firmware that could have some vulnerabilities. It's all in the dashboard. It's very easy to make reports and see them. It really helps people who use Duo, and they have their endpoint in there. It really helps us see a lot about their device.
It helps us save money and time, especially for identify privileged access users who are having problems logging into devices. We get it to automatically alert us, so we can be proactive about finding out what the issue is because if you see a lot of repeated attempts to log in to something, then you see that in Duo, it will email us, and then we can go to just investigate and remediate the issue. It's usually somebody with a bad password, trying to put it in many times, but you never can be sure. So it really helps us be proactive in the aforementioned situations.
Regarding my assessment of Duo Security for establishing trust for every access request, no matter where it comes from, I would say that it does pretty well. So, I don't know if I can talk more about this because we really only have certain avenues into privileged access devices, so I really can't say if it is from anywhere.
It is very important for me that Duo Security considers all resources to be external, especially from a principal security standpoint. It's a great posture to have, and I think that having that kind of posture is good for your security just inside your own network if you treat everything as external. They speak the same language security-wise that we look for in our organization.
Duo Security has helped improve my company's cybersecurity resilience, considering that in our limited scope of where we use it, we are more resilient because of those formation things where we learn about issues proactively, and then we can actually mitigate them, and the report shows trends. So if we see trends, we can see what we mitigated, and we can look at those trends and see if there's a more focused approach than maybe a more long-term thing we need to look at or a bigger change we need to look at. I would say it's helpful from that point.
I would tell those planning to use the solution that Duo Security is a seamless and really transparent solution for its users, and it's very integrated into one's existing systems. Ease of implementation is for somebody who has to engineer a solution and implement it. The ease of implementation is one of the top five things. It's the ease of implementation and it's the integration in your existing systems that really sells Due Security for me.
I rate the overall product a ten out of ten.
Provides a single log in place for all SaaS applications and helps in RADIUS authentication
What is our primary use case?
We use Duo Security for authentication for all of our SaaS applications. We also use it for RADIUS authentication.
How has it helped my organization?
Duo Security makes logging into all our applications easy with one stop for all our activity there. We use Cisco across the board for networking, and we love Cisco.
What is most valuable?
Since Duo Security provides a single place to log in for our SaaS applications, we don't have to manage user accounts and remember passwords for each specific application.
What needs improvement?
Duo Security should better organize its tile feature to organize applications better.
For how long have I used the solution?
We have been using Duo Security for about three years.
What do I think about the stability of the solution?
Duo Security's stability is good, and we haven't had any issues.
What do I think about the scalability of the solution?
Duo Security's scalability is good. We are a fairly large organization but haven't had any scalability issues.
How are customer service and support?
Duo Security's technical support is great. They do a better job on the Duo side than on the networking side for support.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We've used Okta in the past. Okta has a really good auto-login feature. Duo Security can do the same thing, but Okta might do it a little bit better. It just automatically logs in if it's part of your profile.
We switched to Duo Security because of our relationship with our account reps.
What was our ROI?
We have seen a return on investment using Duo Security because it saves time.
What's my experience with pricing, setup cost, and licensing?
Duo Security's pricing is good, fair, and very comparable to today's market.
What other advice do I have?
Duo Security Self-Service Portal has significantly helped free up our IT staff for other projects. Instead of managing thousands of accounts across hundreds of SaaS applications, it's all in one spot now. Duo Security has probably saved us four or five hours at least.
I think Duo Security does a great job of establishing trust for every access request, no matter where it comes from.
It is very important for our organization that the solution considers all resources to be external because it frames the activity as zero trust, and that's how we run our network to zero trust across the board. So when you treat all resources as external, we want to lock them down every time and not just have random passwords floating everywhere.
Duo Security will significantly simplify the life of someone who wants to improve cybersecurity in their organization, and they should definitely try it.
Overall, I rate Duo Security ten out of ten.
Keeps us secure, allows us to be remote, and is simple to deal with
What is our primary use case?
We use it for multifactor authentication for getting in with cell phones and PCs.
How has it helped my organization?
Duo Security allows us to be remote, and it keeps us secure. It has been very good for securing our infrastructure from end to end. We haven't had any issues.
It has helped free up our IT staff, but I don't have the metrics on how much time it has actually saved. We don't worry about it. It just works.
It has been good for establishing trust for every access request, no matter where it comes from.
What is most valuable?
We're working remotely. It helps us keep people more safe. Its adoption has been fine. I like the fact that you can bypass it if you need to because there are situations where the internet doesn't work, etc.
Its ability to help reduce the risk of breaches is pretty good. I like its ability for user authentication and device verification.
What needs improvement?
We use Yubikey for pushing it to the phones. Yubikeys can get expensive because people tend to lose those for some reason. Fifty dollars a device is pretty high.
For how long have I used the solution?
I've been using this solution for a couple of years.
How are customer service and support?
I don't deal directly with their tech support myself. I've got some other folks that do that for me, but I don't hear any complaints, so I'd rate them really high.
Which solution did I use previously and why did I switch?
We did use another solution. I can't remember the name of it, but it had a lot of flaws and a lot of issues. It did not connect to the equipment that we had to use. It would break down, so we had to find something else.
We didn't consider another solution. While researching, Duo Security came out to be the best. The last one was terrible, and this one ranked a lot higher.
How was the initial setup?
We have a hybrid deployment. It was very easy to implement it.
It integrates well with other systems. We have Cisco Umbrella and Cisco routing and switching. We had Cisco firewalls, but I wouldn't recommend them.
What was our ROI?
We've seen an ROI in using this product. There is stability and ease of use. It isn't a problem to handle. It's simple to deal with.
What's my experience with pricing, setup cost, and licensing?
It falls in line with everything else.
What other advice do I have?
To someone researching this solution who wants to improve cybersecurity in their organization, I'd say that it has been very beneficial.
Overall, I'd rate Duo Security a ten out of ten.
Provides heightened security and has a helpful customer support team
What is our primary use case?
We use Duo Security to level up security and access to internal systems.
How has it helped my organization?
Duo Security has provided us with heightened security. That's the biggest benefit because, nowadays, security risks are big due to hacking. This solution narrows down a lot of things that we have to go through.
What is most valuable?
If you have to log in to something, you must go to Duo Security to confirm that you're who you are on your phone. From there, you go back to the app, and it allows you access.
What needs improvement?
When you come to the push in Duo Security, there are some integrations where you have to use the code instead of the push functionality. Sometimes, you have to go and push from the app, go to Duo Security, and then go back over after you've accepted the push. It would be good if a seamless web comes down, you press the button at the top, and it goes away while you're still in the app.
For how long have I used the solution?
I have been using Duo Security for about two years.
What do I think about the stability of the solution?
Duo Security is a pretty stable solution.
What do I think about the scalability of the solution?
Duo Security is a scalable solution. You can easily download the app, log in, and you have access. Scaling is not an issue with Duo Security.
How are customer service and support?
Duo Security's customer support is very helpful, going above and beyond what they normally need to do to get things fixed and resolved. I can always reach out to my reps, who try to figure out what's going on to help me.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Since I changed companies, I can't remember the old solution, but it was probably some Microsoft solution. It did almost the same thing as Duo Security, except that Duo Security has the push. So instead of going back and finding the code, it can easily just push to the app, allowing you access. So it's a little bit faster to access your systems than having to find these different apps.
What was our ROI?
We have seen a return on investment with Duo Security because getting hacked once would cost us millions. So investing in a solution like Duo Security saves us all that money.
What other advice do I have?
Most solutions do what we're trying to use Duo Security for. It ensures a person has different access to the system via a different device like a YubiKey.
Duo Security has helped to improve our organization's security posture through reassurance in giving out access. Having something like Duo Security on the back end can help pinpoint who's logging in and ensure there is no random bot.
I highly recommend Duo Security because it's still seamless from my standpoint. I don't know how it would be on the back end, but it'd be a great application for any organization wanting to heighten its security on user access.
Overall, I rate Duo Security ten out of ten.
Best MFA by Far
Duo is so easy to use!
Senior director of cyber security
User friendly
I am looking for a strong proffesional support
Quick easy authentication
DUO is smart and easy and keeps up with new authentication challenges
Duo also has excellent user education tools and instructions that are quite comprehensive and easy to follow. Our work to notify and educate our users about our change to MFA was made easy since DUO provided the material for us. Well done/professional sort of documents and posters
Duo Security integrates with the products of multiple vendors to provide MFA.
The SSO feature is very impressive. It reduces the need for multiple passwords for different applications.