Cisco Duo - Premier Edition logo

    Cisco Duo - Premier Edition

    Cisco Duo provides the only security-first Identity and Access Management (IAM) solution to protect organizations from identity-based threats. Duo integrates all necessary components to serve as the sole IAM platform, while operating as a unified defense layer across your existing identity infrastructure.

    Ratings and reviews

    4.5
    626 ratings
    15 AWS reviews
    |
    611 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (626)
    reviewer2848827

    Strong authentication has reduced password issues and improves daily security operations

    Reviewed on Jun 04, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for Cisco Duo is authentication. Currently, I am only using Cisco Duo for authentication, which is the first piece. I cannot comment on the whole architecture because I don't work on that team. I would say I'm using Cisco Duo as an added security layer.

    I can only talk to the human identities because that's the use case I have seen. I don't think we have, or at least I don't know if we have deployed it for the agentic use case.

    What is most valuable?

    The feature I like the most about Cisco Duo is the iWatch.

    The benefit of using Cisco Duo's features for my organization is better security. We don't have to worry about changing passwords very often and things of that nature. Overall, it improves our security posture.

    What needs improvement?

    To improve Cisco Duo, wherever the team can try to reduce the number of clicks an end user needs to go through to authenticate would be good. Otherwise, I think it's pretty flawless.

    For how long have I used the solution?

    I have been using Cisco Duo for maybe six years.

    What do I think about the stability of the solution?

    In all my years of using Cisco Duo, I've had maybe a couple of issues here and there, but there are so many different options to authenticate using Cisco Duo, so if one is not working, I can always revert to another. Thus, we've been able to work around things, and they come back up pretty soon as well. I think it has performed better than any other cloud platform.

    What do I think about the scalability of the solution?

    Cisco Duo has scaled well with the growing needs of my organization, and because it's a cloud-based platform, we haven't really had any issues scaling the solution. It's been fairly seamless.

    How are customer service and support?

    I'm sure Cisco Duo's customer service and technical support are great, but I haven't had to call them, which is a good thing.

    On a scale from one to 10, I would rate Cisco Duo's customer service and technical support a 10 just because I haven't had to use them, but I'm sure they are top-notch because they are a Cisco-based company.

    Which solution did I use previously and why did I switch?

    Prior to adopting Cisco Duo, I don't think we used anything else beforehand in my company, but I've used other products whenever I've accessed things that other companies are hosting. I've used Okta and Microsoft, which are not very seamless compared to Cisco Duo.

    What about the implementation team?

    I was not part of the deployment team, so I can't really comment on that, but as an end user, my experience with Cisco Duo was pretty seamless.

    What was our ROI?

    Cisco Duo has definitely improved my operational efficiency and reduced costs in areas like authentication and IT support, as evidenced by a reduction in security tickets since we don't see too many password change requests or forgotten password calls anymore. Everything is Cisco Duo authenticated these days, so that has been a very positive change.

    What other advice do I have?

    If Cisco Duo were removed, I guess we will have to use an inferior product from somebody else. I don't know how that's going to impact the end-user experience, but it's probably going to be worse.

    I'm not sure exactly how Cisco Duo has helped our organization become more resilient to phishing attacks, so I'm probably not the right person to ask that question. But I'm guessing because most of our apps are secured behind Cisco Duo for authentication, that helps overall with phishing.

    Before implementing Cisco Duo, I was concerned about increasingly sophisticated phishing or credential-based attacks, but because Cisco Duo keeps up with all those threats and things of that nature, we feel fairly secure using Cisco Duo.

    As my organization adopts and deploys AI agents, most of the platforms we are deploying are secured behind Cisco Duo authentication. I'm not sure if deploying the agents includes Cisco Duo for those agents or not, but all those platforms we are using are secured behind Cisco Duo for authentication.

    Looking back, Cisco Duo has helped me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform, though right now, the only use case I know is more human identification purposes. I'm pretty sure my company is looking into deploying it for agentic AI as well. Cisco Duo has helped me evolve my IAM strategy.

    When evaluating my identity strategy, I was not looking for a standalone MFA tool but rather a comprehensive identity security platform. I'm pretty sure we selected Cisco Duo because of its capabilities, not just for authentication, but for the overall solution. I think Cisco Duo represents more of a comprehensive security solution rather than just a standalone MFA tool.

    The end-user experience stood out to me in my evaluation process, which is why my company selected Cisco Duo. The key capabilities beyond MFA that led me to choose Cisco Duo as my primary identity security partner include the end-user experience and the MFA piece, as well as the fact that Cisco has many other security solutions and is a very trusted company. That helps the overall story because all the other solutions work seamlessly together, making Cisco Duo a great solution.

    We have expanded our usage of Cisco Duo. On a scale from one to 10, I would rate Cisco Duo overall a 10 and advise other organizations to go for Cisco Duo. They've been solid over the years, and they innovate and come up with better security every time. I would give them a 10 out of 10. I would also say don't compromise on such a crucial security posture item by getting something that's free but also far less secure, like Microsoft. My overall review rating for Cisco Duo is 10 out of 10.

    reviewer2848824

    Authentication has become seamless as push approvals cut costs and simplify everyday access

    Reviewed on Jun 04, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for Cisco Duo is authentication.

    What is most valuable?

    The feature I like the most about Cisco Duo is App Push.

    Cisco Duo's App Push feature allows me to authenticate from my Apple Watch.

    Cisco Duo has improved my operational efficiency and reduced costs in areas such as authentication, IT support, and security operations, as the ability to use App Push eliminated the need for text messages and additional costs for messaging, also lowering IT support costs because of the simplicity for the end-user experience.

    What needs improvement?

    I cannot think of any improvements or additional features that should be included in the next release of Cisco Duo.

    However, I would say that Microsoft is somehow making it harder for Cisco Duo to do its job seamlessly with some of the hooks that Microsoft has in the OAuth connection.

    For how long have I used the solution?

    I have been using Cisco Duo for 15 years.

    What do I think about the stability of the solution?

    I have not experienced any downtime, crashes, or performance issues with Cisco Duo.

    What do I think about the scalability of the solution?

    Cisco Duo scales well with the growing needs of my organization, as the fact that Cisco is continuing to invest in Duo and bring things such as agentic authentication to the table allows us to continue using Cisco Duo.

    I am not aware of any expanded usage of Cisco Duo yet.

    Which solution did I use previously and why did I switch?

    Prior to adopting Cisco Duo, I was not using another solution to address similar needs, as Cisco Duo was the first two-factor authentication that I am aware of us using.

    What about the implementation team?

    As my organization adopts and deploys AI agents, we have a team tackling the issue of agentic IAM to ensure that these non-human identities are secure, and Cisco Duo is a key part of the authentication strategy.

    What was our ROI?

    Cisco Duo has improved my operational efficiency and reduced costs in areas such as authentication, IT support, and security operations, as the ability to use App Push eliminated the need for text messages and additional costs for messaging, also lowering IT support costs because of the simplicity for the end-user experience.

    Which other solutions did I evaluate?

    I do not recall what other solutions we were considering before selecting Cisco Duo, but I think we made a good choice with Cisco Duo.

    Microsoft was not one of those we considered; my search predates Microsoft's offerings in identity.

    What other advice do I have?

    If Cisco Duo were removed, the impact on my ability to manage and secure access across my entire identity ecosystem would be that I would have to use something else.

    I have no idea what steps my organization has taken to become more resistant to phishing attacks, and I am unsure how Cisco Duo's broader security approach has contributed to that effort.

    I have no idea what types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo, and I do not know how those threats have evolved.

    Thus far, to my knowledge, we are using Cisco Duo primarily for human users, and I do not know that we have started for agentic users.

    Cisco Duo has helped me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform, as the more capable platform offers us more capable features.

    When evaluating my identity strategy, I was initially looking for a point product, but as Cisco Duo has evolved from a point product into more of a platform, it has become more useful.

    I rate this review a 10.

    reviewer2848815

    Strong authentication has secured remote access and improves identity risk visibility

    Reviewed on Jun 04, 2026
    Review provided by PeerSpot

    What is our primary use case?

    Cisco Duo's main use case for us is dual authentication.

    What is most valuable?

    The security side of Cisco Duo is what I appreciate the most. Cisco Duo's authentication means people cannot get into our network without the second step.

    Cisco Duo's visibility into identity-based risks improves our ability to manage the security of both human users and non-human entities, though distinguishing between them would be the hard part because from our point of view, everything appears human. However, you can often tell by the usernames that are attempted that it is not really a human.

    Cisco Duo scales well with the growing needs of our organization, and we have expanded usage. Since we combined three different data centers into one, we purchased licenses for each side of it so we can log into each data center from one spot. Cisco Duo gave us that ability to do that, transitioning from one footprint to three.

    What needs improvement?

    Integration was probably the toughest part for us with Cisco Duo, as with any new product. We are looking at AI to integrate Cisco Duo with AI to make the integration more streamlined and user-friendly. As a network person, I am used to switching and routing. When it comes to Cisco Duo, it is more of a server setup instead of network configuration, so that was the hardest hurdle for us.

    For how long have I used the solution?

    Since 1998, we have been using Cisco Duo. I believe we deployed it roughly in 2017.

    What do I think about the stability of the solution?

    I very rarely have experienced downtime with Cisco Duo. The only time that there is a holdup is when the internet connection to the phone delays the push notification, and that has really been the only issue.

    How are customer service and support?

    My experience with Cisco Duo's customer support and technical support has been great. Anytime we have run into a hurdle where we cannot figure it out, technical support is right there and very quick. I rarely rate things at ten, so I give it a nine because I always see there is room for improvement.

    Which solution did I use previously and why did I switch?

    For MFA, Cisco Duo was really the only thing that we had, and it was our first, so we did not have anything before it.

    How was the initial setup?

    Our higher-ups looked at every possible avenue when selecting Cisco Duo, but it was the best fit for our topology, which is why we went with it.

    What about the implementation team?

    My experience with Cisco Duo's deployment was minimal. I had input on it, but the team that actually did it was still part of the network team, and they do more of that kind of work. Since I am known on the switching and routing side, I had input on it, but I did not actually do it.

    What's my experience with pricing, setup cost, and licensing?

    From my point of view, I do not see the pricing or setup cost side of it because purchasing deals with all of that. I am assuming that since they purchased it, Cisco Duo was one of the cheaper options. It also was the best fit for our network since we are mostly Cisco.

    Which other solutions did I evaluate?

    Before we got Cisco Duo, we were encountering everything from phishing to credential-based attacks. We would get global attempts where everybody would try to get into it, and it significantly reduced the volume by doing it that way. Using Active Directory accounts and then the second step with Cisco Duo made it so that they just could not get in.

    What other advice do I have?

    If Cisco Duo were removed, it would be the old days where we just directly connected, and we do not want to do that anymore, even though it was faster and I liked it.

    We use more than just Cisco Duo for phishing attacks, and we have multiple layers of different products that we use. Splunk is even one of them that we used in the past, so Cisco Duo helps with minimizing the amount of people trying to get into our network via VPN primarily.

    We are not exploring AI at the moment, however, we are considering it. At the data center, we have not implemented anything with AI yet.

    When evaluating our identity strategy, it came down to cost. We are cost recovery, so we have to do everything the cheapest way possible, which is why we still run seventeen-year-old products.

    Cisco Duo has improved our operational efficiency, and the security side of it was really the biggest thing.

    I rate Cisco Duo a nine because there is always room for improvement, no matter what.

    Michael Manglona

    Multifactor access has secured compliance and simplifies managing identity-based risk

    Reviewed on Jun 03, 2026
    Review provided by PeerSpot

    What is our primary use case?

    For MFA, our main use case of Cisco Duo is to ensure secure access.

    We use Cisco Duo for authenticating prior to connecting to VPN, integrating with our GlobalProtect, Palo Alto, and it really helps our organization.

    Cisco Duo acts as a central point that integrates with our security products and tools, including our firewall.

    What is most valuable?

    The feature I like the most about Cisco Duo is the generated pin passcode.

    If Cisco Duo were removed, it would be an issue with CJIS compliance for MFA issues, affecting our ability to manage and secure access across the entire identity of the ecosystem.

    The upgrades and the updates we have with Cisco Duo, along with fixing our appliances that have the applications, have contributed to our efforts to become more resistant to phishing attacks.

    The visibility of Cisco Duo into identity-based risk has improved my ability to manage the security of both human users and non-human users' identities across my environment; it is accurate, and it is a really good tool.

    Looking back, Cisco Duo has helped me evolve our IAM strategy from simple authentication to a more comprehensive identity security platform, as it is easy to manage and integrates well with our current platforms and application programs.

    Cisco Duo meets both federal and state compliance as well as the CJIS compliance, which is criminal justice compliance.

    What needs improvement?

    For the next release, Cisco Duo could be improved by adding touchless authentication and biometric features.

    What do I think about the stability of the solution?

    I have experienced some bugs with Cisco Duo, but the patches were able to fix them; when Duo releases those patches, we can patch Cisco Duo security on the server side.

    What do I think about the scalability of the solution?

    Cisco Duo really scales well with the growing needs of our organization; it has been great and excellent.

    When we expanded, the process with Cisco Duo was pretty much easy; everything was done within a day, and their tech support was easier to communicate with.

    How are customer service and support?

    With Cisco Duo, I would say their customer service and technical support is a 10; they are really good.

    Overall, I would rate their customer service and technical support a 10, as they are very easy to contact when I do tickets, getting a response within an hour, and their technical support is really friendly and professional with solutions to our issues.

    Which solution did I use previously and why did I switch?

    Prior to adopting Cisco Duo, I was not using another solution to address similar needs.

    Which other solutions did I evaluate?

    I did not consider any other solutions before selecting Cisco Duo.

    What other advice do I have?

    As our organization adopts and deploys AI agents, we are not there yet in our sector, in the public sector, but pretty soon we will catch up, and I am pretty much sure we are going to be still using Cisco Duo.

    Cisco Duo fits as an added security layer in our broader security environment.

    The key capabilities beyond the MFA that led me to choose Cisco Duo as our primary identity security partner was its easy integration into our current IT infrastructure.

    Cisco Duo has improved our operational efficiency and reduced costs in areas such as authentication, IT support, and security operations by enhancing our security workflows; pretty much everyone is using MFA at work, making it easy for us to see who is actually accessing our network and computers.

    The best advice I can give to another organization considering Cisco Duo is that it is user-friendly and easier to integrate into an IT infrastructure.

    I would rate this review a 10.

    Brett Matthew Coleman

    Strong access controls have protected identities and stop ongoing credential-based attacks

    Reviewed on Jun 03, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use cases for Cisco Duo are providing access control, ensuring that the people who need to access resources are the appropriate people accessing them. For 2FA, I ensure bad actors are not pretending to be someone's identity with stolen credentials. It serves as a secondary enforcement for that identity check.

    What is most valuable?

    The features I like the most with Cisco Duo are the push features, the SAML features, and the SSO capabilities that allow integration with anything in my environment for SSO and authentication.

    When considering examples of how the features I have mentioned benefit my company, the biggest benefit I have seen has been with my clients. One client I had, we were able to turn the tide on a security attack that happened to them by using Cisco Duo. They were infiltrated and suffering a cybersecurity attack, what we would call a Golden Ticket attack. The Golden Ticket attack essentially means they have access to their identity and identity system and can generate new users with high permission levels. They did not have Cisco Duo before we were involved, which meant these accounts could just create a password, login, without any secondary check to confirm whether this is really the person who is supposed to be accessing these systems. We spent close to a week fighting with the bad actors. Getting Cisco Duo enabled allowed us to turn the tide in that fight. Once we were able to get Cisco Duo integrated with their Active Directory, these accounts they were trying to create were then required to authenticate with Cisco Duo, which we were the only people with access to. They did not have access to Cisco Duo, so they were not able to get into the system as deep as they were. We were able to start locking down the network piece by piece and secure our client.

    If Cisco Duo were removed from my company, the biggest thing I would see is that if any credentials have been phished or leaked, without this secondary authentication method, I am opening myself up to the same kind of attack I just described. I am opening myself up to the ability for someone who has my credentials, maybe even sitting on them for a while. If I do not have a policy to make me change my password, I probably have the same password or an enumerated version of it for a while. It is very easy for someone to access my systems. Without a secondary method, 2FA is probably one of the most impactful ways, specifically with Cisco Duo, for me to be able to secure my enterprise and make sure people are not stealing my credentials and trying to access my systems maliciously.

    The steps we have taken to become more resistant to phishing attacks and how Cisco Duo's broader security approach has contributed to that effort involve securing the accounts that we need to secure appropriately and being able to make it simple for our users to use. That has been the biggest win for us—allowing our users to log into their desktop. That is how we use it internally in our own company. Logging into your desktop and that one push that you authenticate takes care of everything for any other systems that we have to access. Cisco Duo integrates and carries my identity. For instance, if I am going from ConnectWise for our CRM or if I am going into Cisco's own tools, I will use Cisco Duo just once when I am logging into my Windows PC, and it allows me to access all of these other systems because it is already integrated. It is seamless and makes it that simple because we want our employees to work more easily and get more value for us. That is absolutely possible when they are able to just get in and do their job without having to fiddle with authentication.

    Before implementing Cisco Duo, I was concerned about various types of phishing or credential-based attacks, and with the rise of AI, it makes it a bit more concerning. There are also data leaks that are happening constantly. You just hear about the incidents. For instance, there was a cruise line that had around six million credentials and identities leaked. Knowing those leaks are out there allows me to lock down my credentials and ensure that even if someone does steal them, only the right person can utilize them to access the system. Additionally, it works in tandem with the ability to stop phishing attacks using a Cisco firewall. Being able to integrate it into a full platform experience for security is crucial.

    What needs improvement?

    I would love to see improvements around Identity and Access Management with Cisco Duo, specifically how we can use that as a central source of truth for all of our IAM tools, including Active Directory. I would definitely like to see more integration from that for sure.

    I really want to get more hands-on with IAM for more features within Cisco Duo. I would like to see Cisco Duo fully develop what it would look like as an IAM service. I would love to get involved in that.

    For how long have I used the solution?

    I have been using Cisco Duo for about five years.

    What do I think about the stability of the solution?

    I would assess the stability and reliability of Cisco Duo as being very high. I rate it a ten out of ten on that front. I have not seen any issues with it. I have been using it for years, and I have not experienced any downtime. I have not heard from clients complaining about it; it is rock solid.

    What do I think about the scalability of the solution?

    Cisco Duo scales very easily with the growing needs of my company because I can buy as few as just a handful of licenses to get started. For example, I can pilot with privileged users and start locking them down to prevent abuse by bad actors. If I want to move into less privileged but still trusted users such as HR, it provides a roadmap if I have concerns around cost. It makes controlling the rollout process much easier.

    How are customer service and support?

    I would describe the customer service and technical support of Cisco Duo as being very high quality. I have never been disappointed in my experience with their support. On a scale of one to ten, I would rate their customer support service as a ten because of their quick response times, the knowledge they possess, and the ease with which they resolve any issues I have encountered.

    Which solution did I use previously and why did I switch?

    Prior to adopting Cisco Duo, I was not using another solution to address similar needs.

    How was the initial setup?

    My experience with deploying Cisco Duo is that it is a straightforward process. It has become almost second nature for us. We can plug it in and explicitly describe to our clients how long it is going to take and the type of VM we need to install, making it a seamless and painless process.

    What was our ROI?

    Cisco Duo has improved my operational efficiency and reduced costs in areas such as authentication, IT support, and security operations significantly. The simplicity of having SSO enabled means I have a one-time login that follows me throughout my session. I can determine how long that session lasts, but when I log into my computer, I can access my CRM or marketing tools or HR policies without issues. Many of these disparate SaaS tools have SAML and SSO capabilities integrated, allowing seamless access after authenticating just once. Cisco Duo is managing the authentication brokering between these different tools for us, simplifying the process and reducing the mental load on our employees.

    What's my experience with pricing, setup cost, and licensing?

    My experience with the pricing, the setup cost, and the licensing of Cisco Duo is that it is really inexpensive in the first place, but the value that I get in return is hard to beat, especially when I consider breaches. Being able to prevent unauthorized access is invaluable. I do not know if we would have been able to stop the breach we encountered without something such as Cisco Duo to provide that secondary identity check.

    Which other solutions did I evaluate?

    I did not consider other solutions before choosing Cisco Duo as it was the option we went with. We heard about Cisco Duo, and we trust Cisco, so that is what we went with.

    What other advice do I have?

    Cisco Duo fits into my broader security environment as part of a defense-in-depth strategy. What I appreciate about Cisco Duo is that it adds that extra layer of authentication, confirming who I am. Not only does it verify who I am, but also what I have, which would be that code or the push notification that I am approving. Cisco Duo provides another layer in the cake of securing my enterprise and serves as a natural plugin to facilitate access across whatever integrated applications I may need to access.

    Cisco Duo has given me the ability to ensure that only specific people who need to access certain data are the people accessing it. They receive the push notification, and if they are not allowed to access that, they are not going to receive the push notification. It has helped us lock down access more granularly.

    Cisco Duo has helped me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform by ensuring that the person is who they really are. It makes sure that not only is it Sam from accounting accessing this tool, but they also have Sam from accounting's phone. It is not someone just pretending to be Sam or someone that Sam gave the credentials to. It ensures that only the right people are accessing the right resources at the right times.

    When evaluating my identity strategy, I was looking for something that is simple and easy to plug in. Since we were already a Cisco partner and client, it was a natural choice and evolution for us to adopt Cisco Duo. In the experiences we have had with clients, such as the one who had the breach, it became a natural piece to ensure a simple, easy way to lock my network down and keep the bad actors out.

    The key capabilities beyond MFA that led me to choose Cisco Duo as my primary identity security partner are its robust MFA functionalities. If I had to highlight something exciting that is new, I do appreciate the ability to integrate IAM as part of that. However, the key functionality remains MFA, particularly the ability to manage risky logins. It is about making sure not only does this person geographically live in the location where they are trying to access, but are they in the place they are supposed to be. For example, are they trying to access it from China, potentially compromising their Cisco Duo credentials? I would see that and receive a secondary layer of protection because Cisco Duo detects the unusual access attempt and prompts for further authentication from the administrator.

    My advice to other companies considering Cisco Duo is that they should have had it in yesterday. It is essential to get all of the rich feature benefits out of it. If they are only using it as an MFA tool, they should look for ways to start integrating it into SSO to facilitate seamless authentication across SaaS or on-premises applications with that capability in Duo. Additionally, I recommend exploring features such as risky logins and ensuring they are accessing the full breadth of what they are paying for. I would rate this solution overall as a ten out of ten.

    Zeb Ramey

    Added strong authentication has protected patient data and reduces unauthorized access risks

    Reviewed on Jun 03, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main uses for Cisco Duo include having two-factor authentication on a number of products including our storefront, Epic, and email. Cisco Duo fits into my broader security environment as an added layer. In the future state, it will have much better integration with our full security stack.

    What is most valuable?

    What I appreciate most about Cisco Duo is the ease of use; it has been a game-changer compared to other products we used in the past. We really value how it is integrated and our users are able to use it easily.

    Prior to using Cisco Duo, we had no two-factor authentication, which is a huge risk factor in healthcare. By adding two-factor authentication with Cisco Duo, we are in a much better security position by ensuring that our users are the ones logging in and we do not have outside unauthorized access.

    Cisco Duo's visibility into identity-based risks has improved my ability to manage the security of both human users and non-human agentic identities across my environment. From the human aspect, it has been invaluable because we can access the portal and see what login attempts are happening, whether they were made by the actual user, and from what country.

    What needs improvement?

    We have not really used Cisco Duo for phishing attacks, but we have used other solutions such as Proofpoint and campaigns to phish our own employees to help them learn how not to fall victim to phishing. However, I need to look into Cisco Duo; I had not realized they had an email aspect.

    I think there may be a feature already, but we have been trying to explore Cisco Duo for the desktop in ways that we could authenticate users on the desktop to access certain applications.

    For how long have I used the solution?

    I have been using Cisco Duo for three years.

    What do I think about the stability of the solution?

    I would assess the stability and reliability of Cisco Duo as excellent; we have not had any major issues with Cisco Duo so far.

    What do I think about the scalability of the solution?

    Cisco Duo scales very well with the growing needs of my organization; we have grown approximately 2,000 users since we first deployed it and we have been able to grow successfully without any issues.

    We have expanded usage of Cisco Duo, and that process has been seamless; the users are already accustomed to Cisco Duo, so adding it to another application or product has been no change to them. They understand what to do.

    How are customer service and support?

    I would evaluate customer service and technical support for Cisco Duo as a 10 out of 10. While Cisco sometimes has their problems, they will get anyone and everyone on the phone within minutes if we have a problem. For that reason, we keep choosing Cisco for our products because we know we have the support from the company.

    Which solution did I use previously and why did I switch?

    Before implementing Cisco Duo, we were mostly worried about people getting in through our storefront, which allows access to Epic and other systems. Fortunately, we do not have the same user ID and password for Epic and the storefront, which adds a layer of security. However, password spraying and other attack methods were a huge concern for us. Although spraying is still happening, attackers are not able to get through because of Cisco Duo, which has been a huge benefit.

    Prior to adopting Cisco Duo, we had no solution for this issue. Cisco Duo was our first attempt.

    How was the initial setup?

    My experience with the deployment of Cisco Duo was easy. I believe we stood the entire practice up within a week and we had minimal issues. The enrollment was straightforward, especially since we were able to text the users all the information and have them self-enroll.

    What was our ROI?

    In terms of operational efficiency, Cisco Duo has improved our security workflow significantly. Being able to have two-factor authentication on our most critical applications has been invaluable. Additionally, we were able to save money from an insurance perspective as our cybersecurity insurance went down considerably from having multi-factor authentication in our environment. While this is probably not the usual route of savings, it did have a significant impact.

    Which other solutions did I evaluate?

    We looked at other solutions before selecting Cisco Duo, such as Imprivata. We use Imprivata for some other use cases already, but the feasibility of Imprivata simply was not there compared to Cisco Duo. We also evaluated Microsoft Multi-Factor, but it did not provide the same capabilities that Cisco Duo could bring.

    What other advice do I have?

    If Cisco Duo were removed by some chance, it would be a major impact. If it were removed without another solution, we would be going backwards, which would not be a good situation.

    When evaluating my identity strategy, I was looking for a standalone MFA tool, and Cisco Duo was the best fit for our organization since we use Cisco products across our environment. I believe there is much we can learn about what Cisco Duo can do in other areas and broaden that scope. I am excited to go back and learn what more Cisco Duo can offer.

    I would rate Cisco Duo a 10 overall in terms of what we have wanted to use it for; it has been painless and seamless. For other companies considering Cisco Duo, from a multi-factor perspective, it is easy to implement. The platform has many connectors pre-built, making it straightforward for us to stand up. We can add applications within 30 minutes, making it a simple and efficient process to get applications onboarded. I would definitely recommend them to give it a try.

    Pial Zaman

    Mfa has strengthened server access control and provides clear insight into login activities

    Reviewed on Jun 03, 2026
    Review provided by PeerSpot

    What is our primary use case?

    We are using Cisco Duo especially because we have a lot of servers, and we need multi-factor authentication to securely access them. This is the primary use case for Cisco Duo. We have also integrated it with another security product from Cisco, Cisco ICE. So we integrate Cisco Duo and ICE together.

    The benefits we gain from Cisco Duo are mainly for secure server access, particularly for those who are organizing server access. There are many authentication options available, but for server authentication, Cisco Duo helps us to create a distinct separation for the server team, especially for those who have RDP connections into the server. Normal username and password setups are enhanced with Cisco Duo's multi-factor authentication, which is a vital part of securing our server infrastructure.

    Cisco Duo helps us in our efforts against phishing attacks, especially because it’s part of the Cisco ecosystem with Cisco ICE. Currently, Cisco is offering Cisco Secure Access, which is a cloud solution. Even if it's going to the cloud, we still need Cisco Duo for multi-factor authentication, so I believe Cisco Duo must be present even with Secure Access or ICE.

    Since implementing Cisco Duo, it has greatly improved our operational efficiency. Previously, identifying who accessed the servers was time-consuming, taking days or months across various locations. Cisco Duo simplifies this process by providing direct insight into login issues, allowing administrators to pinpoint problems rather than just dealing with password resets.

    What is most valuable?

    I like Cisco Duo particularly because it's integrated with the other Cisco ecosystems. Cisco ICE, or something similar, allows for additional authentication checks when someone logs into Cisco Duo, confirming whether the user is legitimate. While Microsoft IDP provides features for multi-factor authentication, it doesn't offer the same comprehensive checks that Cisco Duo does. Cisco Duo can identify the user's location and currently offers features that were not available before.

    Cisco Duo scales perfectly with our organization's needs. We have a substantial number of licenses, and it's easy to track user activity via the dashboard. Due to our enterprise agreement with Cisco, we automatically receive additional licensing as our usage increases.

    The impact of removing Cisco Duo would definitely be significant, as it provides essential multi-factor authentication to log into our servers. Without Cisco Duo, if someone has a username and password, they could log directly into the server without additional security checks. With Cisco Duo, we confirm not only the user's ID but also their location. For instance, if someone is trying to access from China while we are in Europe, we could recognize the anomaly. If Cisco Duo is removed, we lose this vital layer of protection, leaving us exposed if someone knows our username and password.

    What needs improvement?

    Addressing agentic IAM with the rise of AI agents is quite complex. Many people now utilize agentic AI, and while I believe Cisco Duo’s multi-factor authentication adds a layer of security, I acknowledge that there are sophisticated attacks that could potentially target it. The fact that Cisco Duo encrypts connections and requires user presence enhances its security, but attackers could still try if they're on the same network.

    I don't see Cisco Duo playing a significant role in managing agentic AI identities at this moment. Currently, in my experience, agentic AI does not integrate well with Cisco Duo, and while I hope Cisco will find solutions for this in the future, I don't believe that capability exists yet.

    I believe Cisco Duo should integrate with Cisco Cloud Control. Given the wide array of security products Cisco offers, it would be beneficial to consolidate them into one dashboard. Having Cisco Duo integrated into Cloud Control would allow us to access all security functions seamlessly.

    For how long have I used the solution?

    I have been using Cisco Duo for the last five years.

    What do I think about the stability of the solution?

    In my experience, Cisco Duo has not caused any downtime or performance issues.

    What do I think about the scalability of the solution?

    We have indeed expanded our usage. We started with around four hundred users and have now grown to almost two thousand. The process was remarkably smooth, supported by our unique licensing system with Cisco, where we automatically gain additional licensing as needed.

    How are customer service and support?

    On a scale from one to ten for customer service and technical support, I would give Cisco Duo a perfect ten. I have had no issues requiring technical support, and the response has always been excellent.

    Which solution did I use previously and why did I switch?

    Before implementing Cisco Duo, I did not utilize another product that directly meets similar needs. Although some might suggest alternatives like Okta or Microsoft, I find that those solutions often focus specifically on end devices, whereas Cisco Duo extends its functionality beyond that.

    How was the initial setup?

    I find Cisco Duo to be an excellent product with a very straightforward deployment. It's easy to implement, taking little time compared to other security products. It's comparable to a module that can be set up within a day.

    Which other solutions did I evaluate?

    We have trialed Microsoft Entra ID alongside Cisco Duo, but as I mentioned earlier, it does not meet the same broad aspects as Cisco Duo does.

    I began with Microsoft Entra ID and am still utilizing it, but ultimately selected Cisco Duo for its superior offerings. Cisco Duo provides flexibility by allowing us to combine it alongside Entra ID, particularly beneficial for my server and network teams. We didn't evaluate alternatives because everything we rely on is within the Cisco ecosystem.

    What other advice do I have?

    Before implementing Cisco Duo, we were concerned about authentication hijacking, as we had an incident where someone managed to gain access to our server. They provided us with the username and password, suggesting they could access it at any time. After introducing Cisco Duo, we realized that while our existing firewall provided security, Cisco Duo significantly reduces the risk of authentication hijacking. Cisco Duo works even beyond on-premises solutions, enhancing security in cloud environments.

    The key capabilities that led me to choose Cisco Duo extend beyond just multi-factor authentication. It serves as a module that communicates with ICE, enabling it to take actions when necessary. While Cisco's other security measures are robust, integrating Cisco Duo into our cloud systems is still a critical need.

    I see Cisco Duo fitting into my broader security environment as an essential security layer rather than a control point. It functions mainly as a security layer to support Cisco’s extensive range of security products, which vary and might not fully integrate with all of them.

    When evaluating my identity strategy, I wasn't looking for a standalone MFA tool; what I sought was a part of the broader Cisco security ecosystem. While I recognize Cisco Duo predominantly as a multi-factor authentication solution, it integrates with other security tools, making it valuable in accessing various services, though I haven't yet seen a connection between Cisco Duo and agentic AI.

    I would tell other organizations that even if they have existing authentication systems, they should consider Cisco Duo. It works effectively across various environments and isn't limited to operating system-based access. I would rate Cisco Duo eight out of ten, and its comprehensive capabilities are a significant advantage.

    reviewer2848767

    Layered access security has protected VPN logins and now strengthens identity management

    Reviewed on Jun 03, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use cases for Cisco Duo are authentication to different services.

    What is most valuable?

    What I like the most about Cisco Duo is that whenever I get a new phone, all of it transfers to the new phone, while Microsoft Authenticator does not; I have to do each one one by one.

    An example of how these features benefit my organization is that we do it for anybody that needs to access the VPN, including student logins at some different schools, so it just makes authentication more secure.

    To become more resistant to phishing attacks, we use Cisco Duo as part of our network access control so that anytime students need to access certain things or teachers' VPN connections, the same for businesses, we secure the VPN that way. We know who's logging in, and we put an extra layer of authentication behind it.

    Cisco Duo fits into my broader security environment as a kind of first layer, mainly for VPNs. As I said, it adds that extra layer of authentication after someone authenticates.

    Cisco Duo's visibility into identity-based risk has improved my ability to manage the security of both human and non-human users' identities across my environment because we see log in attempts, so we can see who's logging into the network through the VPN at certain times, giving us another layer of visibility on who's on the network.

    What needs improvement?

    The way Cisco Duo can be improved, including features that should be included in the next release, is something I don't know off the top of my head; I would need to go back and look at our customers' wants and what they would like to see implemented.

    For how long have I used the solution?

    I have probably been using Cisco Duo the entire time.

    What do I think about the stability of the solution?

    I assess the stability and reliability of Cisco Duo by noting that the only time we experienced an issue was when doing RADIUS authentication, and we had to tweak the timer to allow time for Cisco Duo authentication to take place before the RADIUS request was denied.

    What do I think about the scalability of the solution?

    Cisco Duo scales well with the growing needs of my organization, being easy to manage as long as we have the Cisco Duo licenses to support the growing user count, and it's as simple as just provisioning them a Cisco Duo license.

    I have expanded usage, and the process of expansion was fairly simple.

    How are customer service and support?

    On a scale from one being the worst to ten being the best, I would rate my customer service and technical support experience as a seven.

    I would give them a seven because they are readily available; we haven't had to reach out to support a whole lot, but I would say maybe just more on the technical side, getting those initial passes through the tiers to the tier that we need to support us.

    Which solution did I use previously and why did I switch?

    Prior to adopting Cisco Duo, I was using Microsoft Authenticator in many environments and some other authenticator platforms.

    What considered the change to Cisco Duo was cost for some and then just overall compatibility with the equipment they had.

    How was the initial setup?

    My experience with the deployment was easy with no real issues.

    Which other solutions did I evaluate?

    Before selecting Cisco Duo, the other solutions I considered were mostly Microsoft Authenticator if their capability to support it was available.

    What stood out in the evaluation process, both positive and negative, when comparing options was integration ability and ease of use.

    What other advice do I have?

    When evaluating my identity strategy, I was looking for a comprehensive identity security platform rather than a standalone MFA tool, since I am an MSP servicing multiple clients, and I prefer a solution that integrates with many different technologies as most clients have a hodgepodge of equipment.

    Cisco Duo's broader IAM capabilities meet those needs by just adding that extra layer of security, which is always important.

    I am using it as an added security layer that integrates with other security products and tools that I may have in my stack.

    The key capabilities beyond the MFA that led me to choose Cisco Duo as my primary identity security partner included MFA as the main one.

    Cisco Duo has improved my operational efficiency to reduce costs in areas like authentication, IT support, and security operations by just securing the environment. It's that extra layer; after putting MFA behind it with Cisco Duo, there's now that extra layer we can fall back on.

    Those threats have evolved in ways that I don't even know how to start narrowing it down; they evolve every day, and so it's just trying to keep the network as secure with multiple layers of authentication on it as much as we can put it on.

    Looking back, Cisco Duo helps me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform by providing another level of security. It puts another layer on everybody's accounts, so if an account is compromised, there's still that extra layer of authentication needed to get through.

    If Cisco Duo was removed, the impact on my ability to manage and secure access across my entire identity ecosystem would mean that, for some of the school systems that we support, we would need to find a different solution, probably Microsoft Authenticator if they have the infrastructure for it, but we would probably be scrambling to get some different authentication sources in.

    My advice to another organization considering using Cisco Duo is to take into account the licensing, ensuring that your environment supports it, and looking at making sure it can integrate with the different equipment you have in your environment. I would rate this product an eight overall.

    reviewer2848755

    Multi-factor access has strengthened VPN security and supports simple, reliable authentication

    Reviewed on Jun 03, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Cisco Duo is authenticating to a VPN.

    Examples of how the features of Cisco Duo have benefited our organization include authenticating to our VPN, which is really all we use it for, and it just works for that.

    The steps my organization has taken to become more resistant to phishing attacks include working on email security and end-user training, but as far as how we use Cisco Duo, it is just multi-factor authentication.

    What is most valuable?

    The features of Cisco Duo that I like the most are that it is simple and works.

    Cisco Duo fits into our border security environment by keeping threat actors out through the use of multi-factor authentication.

    The visibility into identity-based risk provided by Cisco Duo allows us to make sure who is connecting is who they say they are.

    Cisco Duo has helped me evolve my IAM strategy from simple authentication to a more comprehensive identity security platform by allowing us to hold tighter security on multi-factor authentication for something as prevalent as a VPN.

    The key capabilities beyond the MFA that led me to choose Cisco Duo as my primary identity security partner included that it was plain and simple and it just works.

    Cisco Duo has improved my operational efficiency and reduced costs in IT support, as we do not really hear anything from the end users unless it is not working for them, because it is really easy to use; they just get a pop-up, press the button, and that is all they are using it for.

    What needs improvement?

    Cisco Duo can be improved in various ways, but for all we use it for, the way it is works just fine for us, so I do not know what could be improved for our use case.

    For how long have I used the solution?

    I have been using Cisco Duo for about a year.

    What do I think about the stability of the solution?

    We have not expanded our usage of Cisco Duo; we use it not very frequently just for connecting to VPN, so we have not really noticed any downtime or issues with it.

    What do I think about the scalability of the solution?

    Cisco Duo scales well with the growing needs of my organization, which is not very big at all, so it works just fine.

    How are customer service and support?

    I evaluate the customer service and technical support of Cisco Duo as really good.

    On a scale from one being the worst to ten being the best, I would rate my customer service and technical support about an eight, as they are normally pretty good to help out.

    Which solution did I use previously and why did I switch?

    Prior to adopting Cisco Duo, I was not using another solution to address similar needs.

    How was the initial setup?

    My experience with deploying Cisco Duo was a bit rough at first, but after we got it smoothed out, it has worked ever since.

    Which other solutions did I evaluate?

    The other solutions I considered before selecting Cisco Duo were Microsoft Authenticator and Okta, and then Cisco Duo was our choice.

    What stood out in my evaluation process was that we looked into all three options, and it appeared that Cisco Duo was our best choice just for how simple it was for the people we were going to give access to.

    What other advice do I have?

    If Cisco Duo were removed, it would take down the VPN connectivity for everybody, so we would have to find some way around that.

    The types of phishing or credential-based attacks I was concerned about before implementing Cisco Duo include needing multi-factor authentication for the VPN because it lets people into our network remotely.

    We have not looked at using AI agents in our organization yet.

    I am using Cisco Duo as an added security layer that integrates with other security products and tools that we have in our stack.

    My advice to another organization that is considering using Cisco Duo is to go for it. I would rate this product an overall eight out of ten.

    reviewer2848677

    Strong authentication has secured critical access and protects users from phishing attacks

    Reviewed on Jun 03, 2026
    Review provided by PeerSpot

    What is our primary use case?

    Cisco Duo's main use case for my organization is confirming authenticated clients. We currently use a secure setup where we rely on YubiKeys to log in, and we depend heavily on Cisco Duo to help authenticate that.

    What is most valuable?

    My most favorite feature of Cisco Duo is the ability to detect whether or not we have a secure endpoint already, such as antivirus installed on our desktop or whatever we're using to authenticate, which is a huge part of security.

    My organization has taken steps to become more resistant to phishing attacks by having the ISO team conduct extensive training for its end users, not only for students but also for internal users as well. We rely heavily on constant updates to Cisco Duo and whatever we can do to change the landscape of how we do security, we often push for it.

    What needs improvement?

    I would rate my experience with Cisco Duo at around eight out of ten.

    The experience with customer support and tech support when I first started with Cisco Duo was lacking on some parts where we were having issues. However, over the past close to two years, they have definitely improved overall for support. Not only has the product been very good and we have done fewer support cases, but I think support overall has been very fast.

    For how long have I used the solution?

    I have been in the industry for about a little over five years, and most of my time has been spent working at Yale University.

    When I got to my current job, Cisco Duo was already implemented, so it would have been in use for well over five years.

    What do I think about the stability of the solution?

    Cisco Duo has been very reliable from my point of view so far, as I have not had any issues with it. The updates as they come are definitely very efficient, resulting in no complaints about it. Through my five years at Yale, Cisco Duo Desktop or Cisco Duo in general has not been an issue for me at all.

    What do I think about the scalability of the solution?

    If Cisco Duo were removed, it would heavily impact my ability to manage and secure access across my entire identity ecosystem.

    How are customer service and support?

    The experience with customer support and tech support when I first started with Cisco Duo was lacking on some parts where we were having issues. However, over the past close to two years, they have definitely improved overall for support. Not only has the product been very good and we have done fewer support cases, but I think support overall has been very fast.

    Which solution did I use previously and why did I switch?

    I do not know what they used prior to Cisco Duo. I believe, because we have been on this long project for close to 9 or 10 years, it is possible that Cisco Duo has been implemented for a long time and possibly is the original solution we have always been using.

    How was the initial setup?

    I have not heard about any deployment issues with Cisco Duo, even from my time at Yale University, and I do not recall anyone complaining about when it was set up. From my point of view, there were no issues on our end.

    What's my experience with pricing, setup cost, and licensing?

    For my team, I am involved in the pricing, cost, and cost setup processes. However, I believe for Cisco Duo Desktop, I would not be part of that conversation.

    With Cisco, the experience regarding pricing has always been very smooth for us. The sales team, whenever we talk to them, regardless of any department, has always been very straightforward and simple, so I have no complaints on my end from them.

    Which other solutions did I evaluate?

    I am not aware of any competitors that were considered when they were picking Cisco Duo, as they have not mentioned anything about competitors. Even moving on from Cisco Duo, they have not mentioned anything.

    What other advice do I have?

    In terms of advice for any other companies or organizations that are considering Cisco Duo, I cannot think of any specific advice. However, in terms of reliability, we have had no issues with it, so if reliability is a huge priority for your organization, then I would definitely look towards Cisco Duo. My overall review rating for Cisco Duo is ten out of ten.