The main use case for Cisco Duo is MFA, which means multifactor authentication using the app and using keys like YubiKeys for various devices, such as RDP and remote access, but I would say remote access is the most prominent use case.
Cisco Duo - Premier Edition
Cisco Systems, Inc.External reviews
External reviews are not included in the AWS star rating for the product.
Strong authentication has simplified remote access and identity management for guests and staff
What is our primary use case?
What is most valuable?
Right now, the feature I appreciate most about Cisco Duo is the Duo Directory, which is exciting because it became an IDP.
It is exciting that with Cisco Duo, I can offload guest users and contractors to Duo, so they do not have to exist in the customer environment from their AD, which is a nice way to accommodate guests and contractors needing access to applications.
I express how I appreciate Cisco Identity Intelligence to customers using the Duo Advantage license and always try to push them to at least take a look because it is essentially free with the Duo product.
I have multiple MFA vendors in our portfolio, and I try to position Cisco Duo because I think it is a really good product, but we also try to position other solutions depending on what the customer wants and where they think we can go together.
I deployed Duo Directory to manage user identities, and I think it is great because it is never a standalone provider; it always acts as an additional provider or broker functionality to be the front door and decide to go this way or go to the other IDP.
Once Cisco Duo is set up and running, it just keeps running.
What needs improvement?
I think Cisco Duo can be improved with more YubiKey support with all applications, especially for Windows login.
For how long have I used the solution?
I have been using Cisco Duo for three to four years, since the beginning of 2020.
What do I think about the stability of the solution?
I did not notice any problem with stability and reliability; it was always available with not much downtime needed.
Sometimes if I have problems, I obviously have to create a TAC case to ask for help, but most of the time, I would say it is very stable.
What do I think about the scalability of the solution?
I think Cisco Duo is scalable for organizational growth, as we have some customers using it who then onboarded new users and even bought companies and onboarded them; it is highly flexible and I did not feel any slowdown anywhere.
How was the initial setup?
The experience of deploying Cisco Duo is great; it is fast and not too complex in my opinion, as you can integrate basically anything into Duo, so I would say the experience is overall very great as an administrator.
What was our ROI?
I think Cisco Duo helped reduce the overall authentication-related cost for the company indirectly, as there is less work to do for the admins, because once it is set up, users understand the app, know how to use it, and rarely have problems, so if new devices need registering, they can do it themselves, depending on the setup.
What's my experience with pricing, setup cost, and licensing?
The pricing for Cisco Duo is kind of okay, but most of the time, your competitor is someone like Microsoft who gives it out for free with their offering, making it tough to argue with customers why they should spend additional dollars to also get Duo to improve their setup, but I think the pricing is fair.
What other advice do I have?
I am mostly part of the deployment and with the customers; I am not on the operational side of things, so I cannot really share about phishing attacks, but I mean, Cisco Duo allows phishing-resistant MFA, which is why I try to push my customers to use it, so I would argue, hopefully not.
That is why I try to push my customers to actually use proximity verification and use passkeys to strengthen security, which was mentioned in my previous answer.
I think there is a return on investment for the support team, where they can help validate customer requests and also through self-service portals, but I do not have any numbers regarding return on investment.
I would give Cisco Duo as a solution a rating of 10 because it is great.
Identity intelligence has strengthened defenses and provides better protection against phishing
What is our primary use case?
Cisco Duo primarily secures our environment.
What is most valuable?
I appreciate the features that Cisco Duo offers. Cisco Duo's team sent us some questions, for example, about the feature called Identity Intelligence. I have tried using the Identity Intelligence feature and have been working with it. I can confidently say that Identity Intelligence has improved my visibility into identity risk and has helped me make defenses against identity-based threats better.
What needs improvement?
The main issue with Cisco Duo is dependency. For example, it verifies the subscription with features Duo Push, OTP code, and phone dependency. If you lose or break your phone, users without smartphones will face connectivity issues. There is also integration challenges, support for legacy systems and cloud connectivity, management overhead, and the system can be bypassed by phishing techniques.
To improve these issues, users should be required to confirm a number to approve authentication requests. This would enable disabling auto push and then enable trust-based authentication with new device detection, new location detection, and VPN detection.
Additionally, Cisco Duo is subscription-based depending on the number of users and has a dependency on mobile devices for advanced features. The cost will become expensive for large user accounts. The system requires approve push and either OTP, with push deployments through Duo mobile applications. There is limited offline support, it requires internet connectivity and cloud dependency. Internet outages can cause authentication issues affecting VPN, Windows login, and cloud applications.
For how long have I used the solution?
I have been using Cisco Duo in my career for three years.
What do I think about the stability of the solution?
I do see instances of lagging, crashing, or downtime. We used to experience downtime, for example, during code upgradations and OS upgrades on the server, switches, and firewalls. We try to mitigate it, but we need to implement upgrades without downtime. Sometimes the device will not come up after reboot, which can cause downtime.
What do I think about the scalability of the solution?
Cisco Duo performs well regarding scalability. The scalability depends mostly on the number of users. The system has good scalability and can handle more users, more logins, and more locations without performance issues. This depends on the cloud-based, globally distributed infrastructure with no dependency on on-premises services. It can scale from 10 users up to thousands and hundreds of users. The system also has load balancing, high availability, and failover capabilities. A small office can support up to 50 users, while a large office can support more than 10,000 users.
How are customer service and support?
I have contacted customer support regarding Cisco Duo for assistance. The quality and speed of support depend on various factors. For example, when we receive any ticket, we need to assign it to ourselves first and then depend upon the SLA to work on the ticket. We need to resolve it within the SLA timeframe.
Which solution did I use previously and why did I switch?
Regarding Proximity Verification feature, I have seen it in action last year.
How was the initial setup?
Cisco Duo's initial deployment is easy. We need to have a mobile application and need to install it for users on VPN, servers, clouds, cloud applications, and for admins and passwords. We need to have a security policy required and identity source such as LDAP, local users, Active Directory, and Azure AD. We need to have VPN devices for servers and firewalls with HTTP 443 port number. We need to have web applications and cloud applications, and Windows login. We need to have end-user devices for MFA, such as a smartphone and SMS. We need to have synchronization for security policy purposes, licensing, and many other components.
What about the implementation team?
Regarding the pricing for Cisco Duo, it is somewhat expensive. Cisco Duo costs depend on the technology. Up to 10 users, it is free. Premium versions go for dollars, such as $10 per user per account. As the number of members increases, the cost increases. It is very useful to have for multi-factor authentication.
What was our ROI?
I would rate the return on investment at an 8 or a 9.
What's my experience with pricing, setup cost, and licensing?
I have noticed an increase in phishing attacks in my organization recently. There has been a significant spike in the number of attacks, and they feel more sophisticated, which makes them more difficult to deal with. We used to get phishing attacks through our emails, SMS, WhatsApp, and fake website links. The domain may show a hyphen, for example, Microsoft hyphen login, and attackers will try to send a link. If you click on that link, all our data will be hijacked. We need to protect our devices and environment and should not click any unknown links. That is why we need to enter MFA with valid credentials.
Which other solutions did I evaluate?
Alternatives to Cisco Duo that we have been using in our organization include third-party applications. We can use Okta and Microsoft SSO, Microsoft Azure MFA, Rublon MFA, Twilio, and PingID from Ping Identity. There is also Secure Authentication and RSA SecurID in the market. There are many third-party alternatives available.
What other advice do I have?
The main issue with Cisco Duo is dependency. For example, it verifies the subscription with features Duo Push, OTP code, and phone dependency. If you lose or break your phone, users without smartphones will face connectivity issues. There is also integration challenges, support for legacy systems and cloud connectivity, management overhead, and the system can be bypassed by phishing techniques.
To improve these issues, users should be required to confirm a number to approve authentication requests. This would enable disabling auto push and then enable trust-based authentication with new device detection, new location detection, and VPN detection.
Additionally, Cisco Duo is subscription-based depending on the number of users and has a dependency on mobile devices for advanced features. The cost will become expensive for large user accounts. The system requires approve push and either OTP, with push deployments through Duo mobile applications. There is limited offline support, it requires internet connectivity and cloud dependency. Internet outages can cause authentication issues affecting VPN, Windows login, and cloud applications.
My overall review rating for Cisco Duo is 8.
Zero trust has been implemented quickly and now supports secure, low-touch access for partners
What is our primary use case?
What is most valuable?
The features I appreciate most about Cisco Duo are its simplicity for the end user and its integration into conditional access for Entra.
These features benefit my company by providing ease of use for our user base, thus driving fewer support tickets. It is easier to deploy, integrates into Intune and Jamf for end-user platforms, and fits very well with our bring-your-own-device policy for mobiles.
What needs improvement?
Cisco Duo can be improved by having easier integration into UbiKeys, which would be fantastic. While they are fairly easy to implement, an easier mechanism for rolling out UbiKeys with Cisco Duo would also be fantastic. Additionally, we could benefit from easier app updating procedures and notifications prior to updates to aid end users when they need to complete updates. We are going through that at the moment, but Cisco Duo is a fantastic product that is great for our end users. It is secure, flexible, and fits very well into the architecture we are trying to establish.
For how long have I used the solution?
I have been using Cisco Duo for eight years.
What do I think about the stability of the solution?
Cisco Duo has not helped my company reduce its overall authentication-related costs, as it is a cost above what we already have. Because we are on Entra, we do have those licenses bundled in with Entra, but the benefits of Cisco Duo outweigh that.
What do I think about the scalability of the solution?
Cisco Duo scales perfectly with the growing needs of my company. There are no problems as it scales up, scales down, and integrates into our IDP, so I have no complaints with the scalability.
Regarding its scalability and reliability, we have sometimes found issues, particularly with iOS updates, only to the point that we were not getting the notifications. However, Cisco Duo support has been fantastic with that. We have a great relationship with Cisco, so they take that feedback very readily.
How are customer service and support?
The customer support and technical service from Cisco have been fantastic throughout. We speak to the product development team as part of that relationship, and they listen to our ideas readily, including the UbiKey ideas, for example.
I would rate the customer service and technical support as a nine out of ten, only because of the slight issues we had last year with the prompts that took a while to fix. It was one isolated incident.
Which solution did I use previously and why did I switch?
Before choosing Cisco Duo, I considered native Entra, which was very much in its infancy at that time.
How was the initial setup?
The deployment experience of Cisco Duo was straightforward. Another gentleman handled the workload that was fairly easy to roll out. It touched multiple teams because we had end-user support, operations, and integration to Entra, so it was a multi-phase approach and a multi-team effort, with change management throughout the organization. The key here is that the most important part, and the most difficult part to do, is our end-user base. At the end of the day, that is what Cisco Duo was picked for because the app is so easy to use for our end-user base on its multiple platforms. If you are going to look at the most challenging thing with a rollout, that is where you need to focus, rather than behind the scenes in the work for integrating it into your conditional access policies.
What was our ROI?
From my point of view, the biggest return on investment when using Cisco Duo is the low support costs. Obviously, you have to have MFA, it is non-negotiable, and the fact that the platform is so easy to use and so flexible provides that return.
Looking back at my initial investment in Cisco Duo versus the total value it has delivered over time, that choice has paid off for my company massively. We were able to implement zero trust extremely quickly because of the platform and its ongoing developments, including Cisco Duo Network Gateway, which enabled that transition to zero trust extremely quickly. This has been a fantastic journey for us and our strategic objective.
What's my experience with pricing, setup cost, and licensing?
My experience with the pricing, setup costs, and licensing of Cisco Duo shows that it is a cost above our Entra costs, which we are always reviewing. The benefits outweigh the cost in terms of its simplicity, its ease of use for the end-user base, and its flexibility with other components we can use and integrate, such as OTP when needed on the odd occasion. Those benefits outweigh the extra cost that we have had to deploy.
Which other solutions did I evaluate?
I picked Cisco Duo at the end of the day again for its flexibility and the range of features that it has, particularly with ease of use for our end user. That is paramount. Providing that extra layer of security with that ease of use for our end user has been superb.
What other advice do I have?
Cisco Duo was the first multifactor authentication platform that I decided on, approximately ten years ago.
I would rate Cisco Duo overall as an eight out of ten because it is a solid product that works incredibly well for our end-user base. It is secure and adaptable, but it does come at a cost above what competitors offer as part of packages we have to pay for already. We could do a better job in informing our users how to update the app ahead of time when that is necessary.
My advice to other companies considering Cisco Duo is to consider it very carefully for the points I have stated. It is a fantastic product that is easy to use and easy to roll out for our end-user base. However, that does come with a cost, which you are probably already paying for as part of well-known IDPs. We have found it a very valuable product to have, and that ROI has been shown specifically in the reduction in support costs.
There is another aspect I would love to share about Cisco Duo. We operate a good number of partnership relationships, and that is another part of the platform that we have found very easy to administer and track, especially for compliance measures.
Strong authentication has improved security and protects our organization from growing threats
What is our primary use case?
My main use case for Cisco Duo is as a two-factor authentication. A quick specific example of how I use Cisco Duo is through 2FA. Everything is fine with my main use case.
What is most valuable?
In my opinion, the best features Cisco Duo offers include its 2FA authentication, which is very good. Everything is perfect about the features; it is very easy to use, and the integration with other systems is very good.
Cisco Duo has positively impacted my organization, and I have noticed specific improvements since using it. The improvements I have noticed include making security very good and increasing our overall security.
What needs improvement?
I believe Cisco Duo can be improved, but I think the current state is sufficient. I don't really wish for any specific changes regarding needed improvements.
For how long have I used the solution?
I have been working in my current field as an infrastructure engineer for approximately 15 years.
What do I think about the stability of the solution?
Cisco Duo is very stable.
What do I think about the scalability of the solution?
Regarding Cisco Duo's scalability, it meets our requirements.
How are customer service and support?
Customer support for Cisco Duo is very good. I would rate the customer support as a nine on a scale of 1 to 10.
Which solution did I use previously and why did I switch?
I have not used a different solution before Cisco Duo, as it was the first solution I implemented.
How was the initial setup?
My experience with pricing, setup cost, and licensing for Cisco Duo is that it's not getting worse; it's better now.
What about the implementation team?
On a scale of 1 to 10, I would rate Cisco Duo as a nine because it's a very good solution.
What was our ROI?
Looking back at my initial investment in Cisco Duo versus the total value it has delivered over time, I have seen a return on investment.
What's my experience with pricing, setup cost, and licensing?
Which other solutions did I evaluate?
Before choosing Cisco Duo, we had IPV as an option.
What other advice do I have?
My advice to others looking into using Cisco Duo is to recommend they use Cisco Duo. My company does not have a business relationship with this vendor other than being a customer.
I have not implemented Duo's end-to-end phishing resistance, and we don't have capabilities such as proximity verification. I still need to check about using Cisco Identity Intelligence. I have noticed an increase in phishing attacks in my organization recently; the attacks are getting more frequent, which is why we improved the security for 2FA.
I give Cisco Duo an overall review rating of 9.
Security has improved and remote access works smoothly for all employees
What is our primary use case?
What is most valuable?
What I appreciate most about Cisco Duo is how simple it is to use; you connect it to the email address and phone number, and you are able to push everything to the client. You can watch the log for a quick response to see if it's working or not, and check what went wrong in the log during the morning or something, and even push something to everyone if needed, so there are many valuable aspects which is very good.
The benefits of Cisco Duo for my company include how easy and simple it is to use; Cisco Duo is so easy to maintain and everything grows quickly with the number of users you add into it. You can even add new applications for verification, and it's policy in our company to have two-factor authentication, which we use in combination with that.
What needs improvement?
I cannot think of a specific feature that should be focused on for improvement, but perhaps addressing the trouble we have when people are changing phones would help. When a new phone is obtained, and Cisco Duo needs to be installed, it is easy to go into Cisco Duo and find the user to push verification, so perhaps doing this through Active Directory could make it easier, but that also raises questions about security.
For how long have I used the solution?
I have been using Cisco Duo for approximately four years.
What do I think about the stability of the solution?
I would describe the stability and reliability of Cisco Duo as excellent because we almost never have troubles with it; the issues we face are with other systems, not Cisco Duo.
What do I think about the scalability of the solution?
Cisco Duo scales very well with the growing needs of my company; during COVID, when we had a higher number of users, there were no problems at all.
How are customer service and support?
I would describe my experience with the customer service and technical support of Cisco Duo as excellent service, and I could totally recommend using Cisco Duo, so it's 100%.
I would rate the customer service and technical support of Cisco Duo a 10, for sure.
Which solution did I use previously and why did I switch?
Before choosing Cisco Duo, we considered Authenticator, which is similar, but I found Cisco Duo easier to implement because we have everything from Cisco, including firewalls and other essential technologies, making it the best choice for our environment.
How was the initial setup?
The deployment process for Cisco Duo is easygoing; I would say it's very easygoing.
I think it took about two days to implement Cisco Duo; as I mentioned, if you connect it to Active Directory, it's straightforward, especially the first time, as you pick everything up from Active Directory and only need to go into Cisco Duo later when people change phones or something similar, requiring verification to see how many users are pending or have not used it.
What was our ROI?
The biggest return on investment for me when using Cisco Duo is security; that's the main point.
Cisco Duo has helped my company reduce its overall authentication-related costs.
I cannot provide an approximate percentage of how much it has helped reduce because, as I mentioned, if people don't use it, they don't get access.
What's my experience with pricing, setup cost, and licensing?
I think the pricing of Cisco Duo is fair because we hired a number of users during COVID when we had many people working remotely, and the costs increased; if I remember correctly, Cisco offered something during COVID that gave us a lower price, so I find the pricing fair.
Which other solutions did I evaluate?
We thought about Authenticator, and our choice ultimately was Cisco Duo.
What other advice do I have?
My advice to other companies considering Cisco Duo is not to wait; start using it and implementing it. I would rate this review a 10.
Reliable, feature-rich product that significantly improves authentication security
What is our primary use case?
I mainly help customers to setup Cisco Duo for multi-factor authentication.
How has it helped my organization?
Duo significantly increases phishing resistance for application access. So the main benefit is improved security.
What is most valuable?
Passwordless authentication - This is the future of secure access. By eliminating passwords entirely through FIDO2/WebAuthn, Duo removes the primary attack vector for credential theft while also simplifying the login experience for users.
What needs improvement?
Cisco Duo is technically excellent, but the main challenge is market positioning rather than product capability. Microsoft Authenticator comes bundled with Microsoft 365 at no additional cost, so many organizations default to that solution rather than purchasing Duo as a standalone product.
For how long have I used the solution?
I have been using Cisco Duo for approximately one and a half years.
What do I think about the stability of the solution?
Cisco Duo is very stable. I have never experienced major outages or service disruptions. The product itself is reliable - any minor issues we've encountered were typically user configuration errors rather than platform problems.
What do I think about the scalability of the solution?
The scalability is excellent. Being cloud-based, Duo handles any user count without infrastructure concerns. We've scaled it across multiple customers without performance issues.
How are customer service and support?
I have no experience with their support - I have never encountered issues that required contacting Cisco. The product documentation and admin portal have been sufficient
Which solution did I use previously and why did I switch?
Yes, I used Microsoft Authenticator but only as a end user. In my opinion, Duo is simpler and more intuitive. From an admin perspective, I can't give a review.
How was the initial setup?
The initial setup is straightforward and fast. Duo's phased rollout approach shows they understand real-world deployment challenges. Overall, it's very easy to implement.
What about the implementation team?
My company is a Cisco Duo reseller and partner, so we perform the deployments ourselves for our clients rather than using external integrators or consultants.
What was our ROI?
I don't have quantifiable ROI data. The value is primarily in risk mitigation - preventing phishing and credential theft. The cost of a single breach would far exceed the investment in Duo. I cannot speak to operational cost savings like reduced password reset tickets.
What's my experience with pricing, setup cost, and licensing?
The pricing is fair and straightforward - per-user licensing makes budgeting simple. Setup is easy and intuitive. The licensing tiers are well-structured and easy to understand.
Which other solutions did I evaluate?
What other advice do I have?
9 out of 10. Duo is technically excellent - stable, feature-rich, with outstanding passwordless capabilities and straightforward deployment.
My advice: Take advantage of the free tier (up to 10 users) and 30-day trial to test it in your environment.
Strong authentication has improved partner access and has simplified secure logins for everyone
What is our primary use case?
What is most valuable?
The feature I like the most about Cisco Duo is push notifications.
I find push notifications beneficial because they are easy, quick, and simple.
An example of how this feature benefits my organization is when last year, Cisco released an announcement that all distributors and partners need to use two-factor authentication for logging into CCW. We were setting up two-factor authentication, and we had two options. Cisco was giving us two options: Cisco Duo or Microsoft MFA. We chose Cisco Duo as a distributor. Everyone started to use Cisco Duo when they were logging in to CCW, and they liked it. After a while, Cisco released another announcement to extend the obligation of Cisco Duo usage for logging in, but most of the people did not stop using it. They liked it and they are still using it.
What needs improvement?
I think Cisco Duo can be improved by following the competition more closely because there are many vendors who claim they also have an MFA solution and phishing attack solutions. I know Cisco well, but I am not an expert on the other vendors. When we try to sell Cisco Duo for any license, sometimes customers approach us and say that Cisco Duo is expensive compared to competitors or that the features are not as good. Closer competition follow-up would be beneficial.
I would appreciate an additional technical feature for Cisco Duo. I think Cisco has more than 15 security solutions. Sometimes they do combinations and integrations among all of them. Cisco Duo might be able to be integrated into more Cisco solutions. For example, Cisco Duo and Umbrella are kind of sister products. That number of integrations could be increased with other solutions.
From my perspective, the pricing and licensing cost for Cisco Duo is worth it, especially if you are using Advantage or Premier. You will see the difference among all. However, from a customer perspective, most cases are just a need for MFA. They do not know the full capabilities or full features of this kind of solution, so they are just using basic MFA features or push notifications. In that case, Cisco Duo pricing is expensive compared to other simple solutions.
I think you can decrease the essential price for basic scenarios and basic cases.
For how long have I used the solution?
I have been using Cisco Duo for more than five years.
What do I think about the stability of the solution?
I have not personally used Cisco Identity Intelligence, but my team is managing Cisco Duo. I have not noticed an increase in phishing attacks in my organization recently, but sometimes it happens. People try to do it, like classic spam or something.
What do I think about the scalability of the solution?
I would say this solution is scalable for the growing needs of an organization because if you know how to use the dashboard and how to monitor it, that is definitely scalable.
How are customer service and support?
For us, I have not used customer service for technical issues very often. There were really rare times when we were struggling with a couple of issues for Cisco Duo, and we opened a case with Cisco.
I remember one time the management tool crashed and kind of froze. We opened the case and they said it was a glitch and it would be resolved. It was good after about 10 or 15 minutes. Another time we could not find how to enable a feature in Cisco Duo dashboard. We asked, and they helped us.
I would rate their customer support as five out of five, or 10 out of 10.
Which solution did I use previously and why did I switch?
I have not used another solution before Cisco Duo for this kind of thing.
Actually, the company has a rule for Microsoft Authenticator, but it is just an authenticator. You type the number and you log in. I cannot say it is like Cisco Duo.
How was the initial setup?
I would describe the experience of deploying Cisco Duo as easy because it does not require too much from the customer's side. You do not have to do many things. You do not have to allow many functions or rules. It is not too hard, and it does not take too long.
What about the implementation team?
We have not implemented Cisco Duo end-to-end phishing resistance with capabilities such as proximity verification for our company, but we did for partner environments. My technical team completed that. After that, we did not get any negative feedback, and as far as I know, they are still using it.
What was our ROI?
I am not sure about the overall return on investment. When we sell Cisco Duo to a customer, it is a subscription model, so they need to renew it, but they are not exactly measuring how many attacks or how many dangers they recover from for their organization. I cannot say if the exact ROI is good or bad because most people are not measuring it. From my perspective, it is definitely worth it.
Cisco Duo has helped reduce my organization's overall authentication-related cost.
I think it saves you at least 20 or 30 percent of your time after you get used to using it.
Looking back at my initial investment in Cisco Duo versus the total value it has delivered over time, I find that we pushed my company to buy it for internal usage. After that, people apart from the Cisco team—we are the Cisco team in Ingram Micro—but apart from our team, the employees in other teams also liked to use Cisco Duo.
Other teams are not different companies. Inside the company, there are some vendor teams, vendor-dedicated teams. We are in the Cisco team. For example, there is an HP team, a Microsoft team, and another team, and they were also using Cisco Duo because of our NFR license, but they liked it.
What's my experience with pricing, setup cost, and licensing?
From my perspective, the pricing and licensing cost for Cisco Duo is worth it, especially if you are using Advantage or Premier.
Which other solutions did I evaluate?
An example of how this feature benefits my organization is when last year, Cisco released an announcement that all distributors and partners need to use two-factor authentication for logging into CCW. We were setting up two-factor authentication, and we had two options. Cisco was giving us two options: Cisco Duo or Microsoft MFA. We chose Cisco Duo as a distributor. Everyone started to use Cisco Duo when they were logging in to CCW, and they liked it. After a while, Cisco released another announcement to extend the obligation of Cisco Duo usage for logging in, but most of the people did not stop using it. They liked it and they are still using it.
What other advice do I have?
Cisco Duo has strengthened the ability to defend against both phishing and identity-based attacks. I would rate this product a 10 out of 10.
Strong multi-factor security has supported audits and protects diverse remote server access
What is our primary use case?
Cisco Duo is primarily used for MFA purposes, whether for remote server login or dual login. It has not been integrated onto an application yet, but it has been integrated across all remote servers, including Windows, Linux, and heterogeneous environments with dual MFA.
We work with major cloud providers and integrate Cisco Duo wherever there is a critical workload to maintain the balance between cost and security. It is not a blind deployment everywhere.
What is most valuable?
Cisco Duo is very user-friendly. You do not need to struggle, and you do not need to teach non-technical users or executives how to use it. If you miss a device or change your phone or handheld devices, you can still reactivate on your new device very easily. It is very user-convenient, and there are many methodologies available. You can get SMS alerts, web plug-ins, and push notifications. It is available for both Android and iOS.
As long as we are clearing the audits, that confirms that we are secure enough. We have been able to convince our security auditors that we are compliant with all the laws, at least from an MFA standpoint, regarding the return on investment from using Cisco Duo.
What needs improvement?
There are some areas for improvement. Cost could be one opportunity, as if the cost is further reduced, we can increase it to the maximum user base. Since DPD is becoming very aggressive and active, especially in countries like India, once the cost is reduced, we can probably scale it to all 6,000 to 7,000 users. Right now, it is only limited to the production environment and could be extended to all applications.
Scalability could also be better if the price were reduced, as scaling is quite expensive. The account manager could reach out for the next level of expansion and offer certain premium support along with a lower cost.
The main areas for improvement regarding Cisco Duo are cost and scalability, which are directly connected.
For how long have I used the solution?
We have been using Cisco Duo for almost more than seven or eight years.
What do I think about the stability of the solution?
Cisco Duo is quite stable when using it recently.
What do I think about the scalability of the solution?
Scalability could be better if the price were reduced, as scaling is quite expensive.
How are customer service and support?
Cisco's technical support is good, as in the last couple of years, we have not needed to reach out to them. Since I have not dealt with it a lot, I would rate them a six or seven in terms of support.
Which solution did I use previously and why did I switch?
We used a couple of products in the past, but the main reason for not adopting them was that the convenience was not comparable. There were no such two or three methodologies through which a user could get alerts, especially push notifications. Google Authenticator is available, but it does not offer push notifications. It offers them only for Google products, but may not work for other third-party applications. Microsoft Authenticator has some capabilities, but it runs quite smoothly on the Microsoft platform but may not work on any third party. Cisco Duo is quite neutral from a product standpoint.
How was the initial setup?
We ran POCs for a couple of months with Cisco Duo. After seeing the usability and user-friendliness, we slowly expanded it to a couple of users. Although it is a costly product, the features themselves enabled us to adopt it.
What about the implementation team?
The deployment of Cisco Duo has been done in-house.
What was our ROI?
As long as we are clearing the audits, that confirms that we are secure enough. We have been able to convince our security auditors that we are compliant with all the laws, at least from an MFA standpoint, regarding the return on investment from using Cisco Duo.
What's my experience with pricing, setup cost, and licensing?
It has not reduced the cost for authentication-related functions, but the cost remains the same. There have not been many changes in the cost. However, because of the user convenience, we are pretty good with the existing cost.
Which other solutions did I evaluate?
We have not deployed Duo Directory to manage user identities.
We have not implemented Duo's end-to-end phishing resistance with capabilities like proximity verification.
We are using CrowdStrike and we are not using SentinelOne.
What other advice do I have?
We certainly use Cisco Duo and Cisco switches and pre-switches, but those are the products.
We are a customer of Cisco.
We are not using Cisco Identity Intelligence.
Phishing attacks in our organization have increased, which is very common. It keeps fluctuating both ways, but we have been able to mitigate this quite well.
Cisco Duo is quite easy to deploy, and I do not see much technical challenges. Any technical team can adopt it quite easily. The overall rating for this review is nine out of ten.
Strong authentication has secured remote agents and improves visibility into device risks
What is our primary use case?
My main use case for Cisco Duo is to integrate with Active Directory, and I am using it for two-factor authentication.
How has it helped my organization?
Cisco Duo has positively impacted my organization by securing our agents using the VPN.
Cisco Duo has helped secure our agents with the VPN, ensuring they must make approvals through mobile devices to verify the person's identity.
What is most valuable?
The best features Cisco Duo offers are device discovery, which identifies whether a device is iOS or Android.
The device discovery feature helps me in my day-to-day work by assisting with our monthly check since the Android and iOS discovery capabilities identify devices without updates for specific versions. When I export the users, I can see those device versions.
What needs improvement?
Cisco Duo can be improved because people have their own personal mobile devices.
I chose a rating of nine out of ten for Cisco Duo because we missed the Duo Desktop integration, as it is not working as well as the Duo Desktop agent.
For how long have I used the solution?
I have been using Cisco Duo for more than five years.
What other advice do I have?
My advice to others looking into using Cisco Duo is that it is a great product, and I recommend it for everyone, specifically for those using Cisco Secure Client.
I am currently using Cisco Identity Intelligence, and it has helped improve my visibility into identity risk and strengthen my defenses against identity-based threats.
MFA has saved daily login time and supports broad integrations for secure access
What is our primary use case?
Cisco Duo serves as the primary multi-factor authentication solution for our company.
What is most valuable?
The simplicity and the number of integrations available in Cisco Duo are the two aspects I appreciate the most.
Cisco Duo is remarkably easy to use. You log in, receive a push notification on the Cisco Duo app, and simply confirm it to gain access. The number of integrations available is exceptional as well. I believe no other MFA service has as many integrations available, and for those who prefer not to use the app, an SMS fallback remains available.
The benefits of such simplicity in Cisco Duo are significant. Employees spend considerably less time logging in and approving logins. They do not grow tired of the multi-factor push notifications because it is easy, fast, and not repetitive, so we do not experience much attrition from it.
Cisco Duo has provided substantial value, primarily in saved time, but also in low cost because administrators do not have a significant workload with Cisco Duo. It simply works, and I believe it has been a great investment for our company.
What needs improvement?
I genuinely appreciate Cisco Duo as it is, and I value the fact that the company has been improving on identity management as well. My advice for the developers is to continue doing what you are doing because you are performing excellently. Perhaps focus even more on identity management because it can become a strong alternative to either Entra ID, Okta, or any other identity access management provider.
We have not yet deployed Cisco Duo Directory for managing user identities.
For how long have I used the solution?
I have been using Cisco Duo for approximately five to six years, essentially as long as I have been with the company.
What do I think about the stability of the solution?
I have not received any negative reviews about the stability of Cisco Duo, and I do not believe we have experienced any downtime with Cisco Duo. The stability has been excellent.
What do I think about the scalability of the solution?
Cisco Duo scales exceptionally well. Adding another user is straightforward and simple. We are a fairly small company by global standards but a fairly large one for our country, so scalability has not been an issue for us. Even if we grow twofold, it will not present a problem for management. You would not need any more engineers to manage Cisco Duo even if we scale up to 500 employees because it is so simple to manage.
How are customer service and support?
The customer experience for me through using Cisco Duo has been excellent, but I cannot speak about technical support because that is handled by our engineers, and I do not have any information on that.
Which solution did I use previously and why did I switch?
We also have a Microsoft group in our company and they mostly use Microsoft products, of course. So for us, as an integrator, it mostly comes down to the vendor you are working with. But my clients and most organizations in our market also often consider Microsoft products, and perhaps FortiToken or YubiKey, which is a hardware multi-factor authenticator, helpful in FIDO-related use cases.
What was our ROI?
The biggest return on investment when using Cisco Duo is time, primarily because it is so simple to use that many employees save considerable time signing in to applications and can focus on other more important tasks.
The time saved with Cisco Duo is at least a couple of minutes per day per employee. If you multiply that by over 300 employees, you can see how much time is saved and how much more time people can spend on actual projects instead of signing on.
Which other solutions did I evaluate?
The reason clients choose Cisco Duo is the same as mine: the number of integrations that Cisco Duo has over other solutions such as Microsoft Authenticator, and also the simplicity of management.
Being a partner of Cisco, we have many benefits price-wise, but with our customers, I believe Cisco Duo is very competitively priced, and it should remain that way because it is easier to position. Many customers are accustomed to having Microsoft products in their environment because of how Microsoft licensing operates, so having competitive pricing for Cisco Duo makes it easier to implement Cisco with customers.
My clients mostly consider Microsoft products because the Microsoft licensing system is designed in such a way as to encourage customers to consume as much of Microsoft services as possible.
What other advice do I have?
There has been a considerable increase in phishing attacks recently, not just at my customers but also at our company. We attempt to mitigate that by running phishing campaigns for our customers to prepare them to react, as part of our cybersecurity portfolio.
But that is more a question for our cyber intelligence group. They have, however, been discussing mostly the use of AI in attacks and how much more sophisticated the attacks have become. Using AI also means that the attack is easier to perform, which subsequently also means there are more of them.
Companies that are considering Cisco Duo should not hesitate any longer. Simply implement it because it is a great product, and I believe it surpasses other multi-factor authentication solutions, and you will not regret it. I would rate this review 9.5 out of 10.