I work in a FinTech-based organization that primarily deals with card payments and payment orchestration solutions. As a FinTech company, we are required to maintain a high level of security for secure data and transactions occurring through our systems and servers. For our authentication process, we were using OpenLDAP and were searching for a solution that could be implemented with OpenLDAP to create a robust multi-factor authentication system within our infrastructure. This allows us to authenticate securely, ensuring that only authorized personnel can access the infrastructure and servers based on their identity.

We use this authentication mechanism exclusively for internal purposes and do not expose it to the public. Cisco Duo is deployed on my cloud servers.

The multi-factor authentication features of Cisco Duo have been particularly valuable to us. One key feature is Duo Unix, which can be implemented directly on Linux servers for SSH access. Additionally, we use Duo Authentication Proxy, which can be separately integrated with other tools such as OpenLDAP for server authentication. We also integrate Cisco Duo with various tools that have dashboards, such as Grafana, to enable secure login capabilities. We primarily use Duo Unix and Duo Authentication Proxy.

After searching through many tools, we found that Cisco Duo can work without requiring PAM modules and can integrate with the other services and tools we were already using. I believe we are fully reliant on Cisco Duo; it is completely reliable with our system, and we use it primarily for the authentication process. Without Cisco Duo, we cannot operate effectively. Cisco Duo is so integral to our core operations that we cannot perform any task without it.

I cannot speak extensively on this point because we are not using Cisco Duo to its full extent, as we are still in the initial phases and exploring its capabilities. So far, I have not found anything that requires improvement. I am satisfied with all the services I am currently using.

I have been using Cisco Duo for approximately one and a half years.

The only issue I encountered was related to the expiration of Duo Unix versions below 2.0.3 on February 3rd. Before the expiry date, the Duo Unix module began behaving inconsistently. Sometimes it did not prompt for authentication, allowing us to log into the server without verification. On other occasions, it responded appropriately, but there were instances when it started malfunctioning. Even though version 2.0.3 was in use during that time, it should have worked without errors. After upgrading to a version prior to that specific version, everything has functioned properly.

I have not tested Cisco Duo's scalability or examined anything related to it. However, I would like to rate it based on its flexibility, which I would rate between eight and nine out of ten.

I have not experienced any difficulty connecting with customer support or any other support specialist. The documentation provided proved to be sufficient. By reviewing the documentation and blogs available, one can easily find solutions and processes for integration and usage. The documents are comprehensive and thorough.

As I mentioned earlier, we were using another multi-factor authentication tool, but it was not compatible with our Active Directory solution. We were searching for a solution that would be compatible with our Active Directory and the other services we were using, which included dashboards and portals for logging into systems. After evaluating many tools, we discovered Cisco Duo MFA.

Initially, I was uncertain about how to implement Cisco Duo MFA. However, through the blogs available on Cisco Duo's page and the manuals and documentation provided, I gradually learned how to implement it and integrate it with our system and other tools. The documentation and blogs were nearly complete and provided me with sufficient knowledge on the implementation process.

I was the one who started implementing Cisco Duo.

I have not implemented Cisco Duo's end-to-end phishing resistance with capabilities such as proximity verification at this time.

I cannot speak to the financial planning of the organization, but I can confirm that Cisco Duo falls within the security budget that has been allocated to us.

After searching through many tools, we selected Cisco Duo because it can function without PAM modules and can integrate with the other services and tools we were already using.

We have not experienced any issues regarding phishing attacks.

I have not deployed Duo Directory, but I have created many users in the user section of the Cisco Duo admin portal. We manage user authentication, their devices, and everything else directly from the portal.

Regarding the use of Cisco Duo for our requirements, I would rate it a nine. Overall, I would rate this product an eight.

My main use case is for Cisco SSE.

It's fast. The whole process takes lesser time compared to other tools we've used before which is very helpful.

I think we'd need more experience to learn Cisco Duo because we're just at the beginning of using it.

I used Cisco Duo since last year.

It's quite stable so it is reliable.

I rate this solution a nine out of ten.

We have, but Cisco Duo was definitely the choice we made because we've been partners with Cisco for a long time so trust is built.

It was handled by a different team but I know that there were some challenges and they were quickly resolved it because there was a collaboration between Cisco and Emerson.

Our main use cases for Cisco Duo are to start using it for multifactor authentication and then to enforce the controls around endpoints and user behavior, and also the Identity Intelligence part to ensure a holistic approach around identity security.

As a CISO, I like the Cisco Duo Identity Intelligence feature the most because it allows me to collect a lot of insights and reduce the time to detect issues on identity.

An example of how Cisco Duo helped in my organization is that we reduced the time to detect anomalies in user or identity usage within our organization.

Now with the automation in Cisco Duo, we are able to open a ticket in three minutes after the platform is able to understand that there is something wrong, whereas previously, it could take hours for our CM to understand and correlate to understand that there was something that was not good happening.

At the moment, I believe that more integration between Cisco Duo Identity Intelligence and the classic Cisco Duo console can be improved, since it is still a separate platform, and when I click on Identity Intelligence, I have to open a new window and log in again.

I have been using Cisco Duo for four years now.

I did not experience any crashes or downtime related to Cisco Duo; there were no issues at all.

The scalability of Cisco Duo in my organization is pretty easy; it is very scalable, and you can start easy and then little by little increase the tuning of the platform in order to achieve a higher level of identity security.

Since I did not have any problems, I did not really use customer service, but I was able to talk with the Cisco Duo product team because we tested the Directory part a little bit earlier than others, and I had a good experience with them.

I have used other solutions before; initially, we were under Microsoft with their multifactor authentication system, but it was lacking some risk context and the risk control that Cisco Duo offers. Two years ago, we compared it with Google's multifactor authentication solution, but again, they were lacking some features that Cisco Duo has.

I had no challenges with Cisco Duo deployment; we simply tested when running a pilot before the final rollout, which was very easy. We leverage a lot of smart working and remote working in our company, so we did not have the opportunity to have everyone at the office for training. Therefore, we pushed everything remotely, and everything worked perfectly.

I can say I have seen a return on investment from having Cisco Duo, as the deployment was not hard to do, saving time for our IT team, and we are able to block a lot of identity risks and issues. Although I have not calculated it, there is definitely a good return on investments.

Regarding the experience of pricing, setup cost, and licensing for Cisco Duo, the setup cost was easy, and the licensing is pretty easy, not with so many levels. For example, the Identity Intelligence feature was a good surprise because it came with our actual licensing, so we didn't have to purchase an additional license. For pricing, we included it inside an enterprise agreement, which allowed us to get a good discount because it was together with other licenses.

We are using Cisco Duo Identity Intelligence as well.

Cisco Duo Identity Intelligence has helped to improve the visibility of the identity risks because it is the platform that allowed us to gain more logs and more telemetry around identity.

I have not noticed any increase in phishing attacks in my organization recently, since last August, when there was a peak in August followed by a new level that was higher than before.

I feel the phishing attacks I am dealing with are maybe not harder but more frequent, and the volume of the phishing messages is raising little by little, while the complexity of the phishing campaigns is growing.

We have implemented the Cisco Duo end-to-end phishing-resistant solution.

For high-risk applications, I use a different level of controls, and we have enabled proximity verification in our organization.

The proximity check in Cisco Duo works fine, and it is easy to use, so my colleagues and employees are not so frustrated by the fact that they have to enter new data or clear a new level of authentication.

We are in the process of rolling out the Directory in the coming months, and we expect to perform a migration in March, so we are close to enrolling and using the Directory pretty soon.

I found that the Identity Intelligence feature was very interesting and an unexpected add-on because at the very beginning, it was not part of Cisco Duo four years ago.

I now have the Identity Intelligence feature, which makes me very happy, and it was indeed the big feature, the big step ahead that we achieved thanks to Cisco Duo.

I would rate this review as a 9.

Cisco Duo is primarily used for two-factor authentication to access the company network.

The features of Cisco Duo that I appreciate most include an administrator's ability to see an overall view of what types of devices users use, which helps identify risks from endpoints that might not be secure enough anymore, and you can see it in one single glance.

The benefit of this feature for my company is that it provides an easy view to see what users are doing, especially with the challenge of bring your own device. Many companies do not want to provide a company device but allow users a budget to buy what they need. If someone wants an expensive iPhone, they have to contribute some of their own money to fit it within their budget, which avoids extra costs for the company while still providing insight into what users are doing.

Regarding the pricing, setup costs, and licensing, I find that for some companies using Azure, they question why they should switch when they already have Microsoft Authenticator, which can make it commercially challenging when explaining why they need to transition to Cisco Duo. I believe you do not want everything with Azure, but it is advantageous to have your security through a security or network company, which can sometimes be difficult to communicate.

There could be better communication in explaining to customers why they need Cisco Duo. Some customers, even at high management levels, express confusion about why they should pay when a free option is available.

I have not experienced any downtime or performance issues with Cisco Duo. There was one instance of a connection problem, but support resolved it in just a couple of hours.

Cisco Duo scaled very smoothly to meet my company's growing needs and fits our requirements very well.

When evaluating the support and technical service of Cisco Duo, I find it excellent. The team understands problems quickly and helps us very efficiently. I would rate the customer service and technical support a nine out of ten.

Prior to adopting Cisco Duo, I was using Microsoft Authenticator for two-factor authentication as the only other option.

The factors that influenced my consideration for a change were scalability, as it can be utilized for more than just basic needs, and the insight it provides. I appreciate that not only can a user log in with their passcode, but administrators have visibility into user activity, allowing you to see a single dashboard view in Cisco Duo, which is very easy.

My experience with deploying Cisco Duo was that it worked well. The first time for me, I thought this is it and it is working.

I have not really seen a return on investment with Cisco Duo, as for me it is more about including Cisco Duo if it is part of the deal when we design a new network and security is required, and two-factor authentication is needed.

From a partner or integrator perspective, I believe Cisco Duo has helped reduce overall authentication-related costs, as the backend is very easy to manage. In large projects, I estimate the reduction in costs with Cisco Duo might be around twenty to twenty-five percent, sometimes more, sometimes less. It depends on the specific situation, but the ease of use and the efficiency of the help desk also contribute to this, as I had a good experience when I needed them once.

For me, the choice to invest in Cisco Duo pays off as I see it as an essential component when selling a network, incorporating it within the discussion around security and Zero Trust principles.

In considering other solutions before choosing Cisco Duo, Microsoft Azure with Microsoft Authenticator came up as a competitor, and in the enterprise, I think Cisco Duo stands out as one of the biggest competitors I know, primarily because of how easy it is to integrate on the backend.

I think Cisco Duo is doing a great job overall. If I look at it and compare it to other two-factor authentication tools, the backend is very insightful.

It is already very easy to add Cisco Duo at your website or service, such as with Cisco Meraki, where the integration is very seamless, but also with tools against key loggers. It is just click, next, next, and it is always working for me.

The winning point for Cisco Duo over others is its simplicity. It is just a security solution in a box, and it integrates very easily.

My advice to other companies considering Cisco Duo is to do a trial to check it out and see at the backend what capabilities you have, and then try it. I would rate this product an eight out of ten overall.

Cisco Duo is used for multi-factor authentication for VPN users and remote access users. I only use the MFA feature of Cisco Duo, and the application is excellent. The dashboards and everything about managing the product is clean and intuitive.

Cisco Duo benefits the company by increasing the security footprint, and it is easy to manage users, disable users, or bypass if needed in case of an emergency. The MFA feature is particularly strong, with an excellent application interface. The dashboards and everything about managing the product is clean and intuitive.

I have not implemented Cisco Duo's end-to-end phishing resistance with capabilities such as proximity verification. I am very happy with Cisco Duo as it is and would not be able to name a feature that could be improved. It was easy to set up and manage, making it an excellent product.

I am uncertain whether Cisco Duo should focus on AI or cost-effectiveness. It is not an expensive product for our company size, and I am unsure what AI could benefit in the solution.

I have been working in my area of expertise for about 12 years.

I have not experienced any downtime with Cisco Duo proxy or the Cisco Duo service in the setup. The only downtime occurs when upgrading the proxy server.

Cisco Duo scales with the growing needs of the company straightforwardly. I have not implemented the other features of Cisco Duo such as Passport, but purchasing more licenses and adding more users is simple.

I have never had to reach out to Cisco Duo's customer service or technical support, so I cannot comment from experience, but I am confident they are competent at what they do.

Prior to adopting Cisco Duo, I was using YubiKey.

Before choosing Cisco Duo, I considered YubiKey. I had been using YubiKey for some time, but when evaluating a platform to perform multi-factor authentication for the organization, I advocated strongly for Cisco Duo because I had been using the Cisco Duo product for a long time for all two-factor authentication needs, and I was already satisfied with the product.

I did not set up YubiKey, so I am not familiar with its technical specifications. YubiKey is a physical key on a keychain that is inserted into a USB port, and they are prone to breaking. Cisco Duo has always been on my mobile phone, making it simple to transfer everything when my phone breaks or I receive a new one.

My experience with deploying Cisco Duo was straightforward, following the documentation. The only issue I encountered was that the documentation was somewhat outdated regarding the file structure of Cisco Duo proxy, but this was not difficult to resolve in a few minutes.

I started the implementation, and then another project took priority, which is why Cisco Duo Directory has not been deployed.

Pricing for Cisco Duo is good, at least for the company size and scale. The setup process was simple. Cisco Duo provides excellent documentation on everything from the proxy and the RADIUS, and how the two should connect. It was a straightforward process, and I was up and running in about one day.

Before choosing Cisco Duo, I considered YubiKey. I had been using YubiKey for some time, but when evaluating a platform to perform multi-factor authentication for the organization, I pushed hard for Cisco Duo because I had been using the Cisco Duo product for a long time for all two-factor authentication needs, and I was already satisfied with the product.

I have tried Cisco Duo Directory to manage user identities, but it has not been deployed yet.

I am not currently using Cisco Identity Intelligence.

I have not noticed any increase in phishing attacks in the company recently.

I would rate Cisco Duo a 10 because it is easy to manage, quick to set up, and offers good value for the price point, contributing to the organization's security. I would recommend going straight with Cisco Duo because it offers probably the best value for the price point, and setup is quick to reach a testing phase.

Cisco Duo has not helped the company reduce overall authentication-related costs, but the organization does gain value from it, even though there is a cost involved.

My main use cases for Cisco Duo in my company start with multi-factor authentication, but I also have projects when I use Cisco Duo for things like mobile posture check and so on.

The features of Cisco Duo that I prefer the most include, first of all, 2FA. 2FA is pretty good because it is simple, and the simple way is what all users love. That is the top feature for Cisco Duo. I also appreciate all the features overall. I appreciate that with Cisco Duo, many people may think that it was just for 2FA, but now it functions as a full identity provider. That is a pretty good upgrade. I like the whole product and how it increases and develops on a huge scale.

I can tell you that for my company, these features benefit us because we work for other customers, so we help them to use these features. When we listen to the client and when we hear that there is something we can use, for example, Cisco Duo, it will be 2FA, it will be for device posture check, and so on. We are offering Cisco Duo straight away because, first of all, we have expertise in Cisco Duo, we know this product, and we have good experience with it.

I would think about how Cisco Duo can be improved, but currently, with all of its features, I believe that it is enough, more than enough. However, Cisco Duo is making surprising updates because you do not know that a feature exists, but then the next day you find out that it is available on Cisco Duo and it works very well.

I have been using Cisco Duo for more than three years, and it has been quite a good experience. The first time I had the opportunity to use this product, it was interesting that it was so easy to work with. I also have to mention that all the documentation that administrators or users would like to have is all available and easy to get. It is pretty easy.

I would assess the stability and reliability of Cisco Duo as excellent. For these three years that I have been working with Cisco Duo, I have not had any incident or downtime because of Cisco Duo being down.

Cisco Duo scales with the growing needs of my clients' companies very well. When we are starting to work with Cisco Duo, clients come to us and they are asking us for a multi-factor authentication solution. They start with this, but when they know the other features that are behind Cisco Duo, they learn that it is bigger than that and the features are more extensive. When our clients know the features, they are stepping towards using these new features progressively.

I would evaluate customer service and technical support, but I have not had the experience to work with them.

My clients chose Cisco Duo over Okta because we told them that Cisco Duo, in this case, is much better. Additionally, it is easy to work with.

I would describe the experience of deploying Cisco Duo as easy because I have mentioned several times that I appreciate Cisco Duo because it is so easy to work with. The deployment part is pretty easy. You have all this documentation, and you are just making several clicks and some changes, and you are up and running. You just have to deploy these mobile clients. The one thing Cisco Duo does not need to improve is the easiest part because I do not know what they can do to make it even easier.

I believe Cisco Duo has helped my company and my clients reduce their overall authentication-related costs. I would like to tell some numbers, but I am just an architect, and I do not have this kind of data.

My experience with pricing, setup cost, and licensing shows that pricing depends on the license. For the essential license, I think the pricing is pretty normal. Regarding the Premier licensing, it is a little bit pricey, but it is in the market range with the competitors.

Other solutions my clients consider before choosing Cisco Duo include competitors such as Okta, for example. Okta was the main competitor.

My advice for other companies that are considering getting Cisco Duo is to try it, and you will be amazed at how easy and how productive this tool is. I would rate this review a nine out of ten.

My main use case for Cisco Duo is providing MFA for all of our users and use cases.

The first focus with Cisco Duo is securing externally available applications, such as SaaS applications. Mostly, we ingest or enforce Cisco Duo via our SSO IDP point because then we do not have to worry about the native integration with whatever application we are trying to secure. If it is SSO capable, we inject Cisco Duo into that.

When it came about, I was a big fan of the risk-based authentication feature of Cisco Duo. That was a big win. Additionally, the Verified Push after the Cisco breach was important, as Cisco recognized that they had to do something about that and they came up with the Verified Push, which is also a very good idea. Nowadays, if I would have known a couple years back what I know today, I would not have worried about that too much because I would have just moved over to passwordless and phishing-resistant MFA means in the first place.

The major improvement I would suggest for Cisco Duo would have been to collaborate with Microsoft more closely and get positioned in a way as a recognized MFA authentication method on Entra. Since Microsoft forced all of their customers to enforce MFA when logging into anything in the Microsoft universe, Cisco Duo was not a recognized way of doing that. It was enforced as an external authentication method, as Microsoft calls it, and it was not a native Cisco Duo integration. Even the external one was not possible to select as a default, so we had to use something else along with it, which for us was Microsoft. That was very annoying.

Cisco Duo did not help reduce the cost of the overall authentication method that we have in our company; instead, it increased, obviously. Cisco Duo was the first technology that we introduced, which had to not just change or implement a certain technology. That was the easy part; the hard part was changing the habits and the culture, getting people to accept what MFA is and to go through the hassle of MFA every single time. The total cost of ownership increased, along with the implementation and the license cost, as well as the reluctance of users to handle IT systems. Security is always a fine balance, where we have to explain to the users what we are doing, why we are doing it, and not overdo it.

Where it lagged behind a lot is in the RDP integration, because we have users, especially in Germany or other jurisdictions, where we cannot force users to use their phone. Therefore, we had to give them some kind of Passkeys, and they are not supported in every use case, or if they are accepted, it is extremely tedious. With standards such as OAuth or FIDO2, that can vastly be improved. Apart from that, it is a very solid MFA solution.

I have been using Cisco Duo for seven or eight years.

Regarding the stability and reliability of Cisco Duo, it is very good. It always does exactly what it is supposed to do, with no downtime over the years that we have had it in use, despite the issues I mentioned with Microsoft, where we were not able to integrate Cisco Duo at all.

Prior to Cisco Duo, I did not use another MFA solution; that was the first one.

I would describe the experience of deploying Cisco Duo as super simple. It was straightforward, one of the easiest consoles I ever had to implement.

I can still say that I have seen a return on investment from Cisco Duo, as having MFA is a basic requirement nowadays. MFA is considered state-of-the-art if you look at things such as GDPR or any other information security framework, so not having MFA means you cannot put a price tag on that because you will be hit with ransomware immediately.

My experience with the pricing, setup costs, and licensing of Cisco Duo is that we have it as part of an Enterprise License Agreement, so that is probably not comparable.

Before adopting Cisco Duo, I evaluated a couple of other solutions, but at that time, Cisco Duo won out primarily because it was available as part of the Enterprise License Agreement, and we were a big Cisco shop already.

I am not using Cisco Identity Intelligence.

I have not noticed an increase in phishing attacks recently in my organization because we are pretty well set up in terms of email protection.

I just learned about the Proximity Verification capability with Cisco Duo. We do not have it because we are already using Passkeys, so we no longer need Proximity Verification.

I did not deploy Cisco Duo Directory to manage the user identity.

I would give this review an overall rating of 8.

In my current role, I have been Head of the Information Security section for two years. Before that, I was a network and security administrator for more than 13 years.

Regarding Cisco Duo Mobile, I am currently the admin for the portal, managing more than 500 users. It is a great system regarding multi-factor authentication, specifically after we did the integration with Active Directory, allowing us to manage the users who use the VPN, our main gateway for VPN Cisco ASA Secure, with full administration.

An important feature that saves time is the automatic unlock; when an employee forgets to approve or deny three times in a row, Cisco Duo Mobile portal locks their account. There is a feature to automatically unlock it within five or six minutes, allowing the time for this automatic unlock to be determined.

One important benefit of using Cisco Duo solution is to ensure that the person using the VPN has their username, password, and mobile; they must approve or decline if they do not have their mobile. Another important benefit is managing users who have access to the VPN because sometimes there are users designed to have access, but the system administrator forgets to remove them, which we can effectively manage from the portal itself.

I have not implemented Cisco Duo's end-to-end phishing resistance.

No additional features are needed at this time.

I rate it a nine because there is still a specific feature regarding Cisco Duo Desktop that must be enabled and optimized better than the current situation. It is not about mobile but about the desktop functionality.

I graduated with a Management Information System degree 15 years ago, and all of my experience is based in the financial sector.

I assess the stability and reliability of Cisco Duo solution as mainly stable, safe, and at 98%.

Cisco Duo scales well with the growing needs of our company; we partner with Cisco, and since all of our components are Cisco, we are always attending Cisco Live EMEAR every year, finding new solutions and technologies, importing new products to our data center regularly.

I have not expanded the usage of Cisco Duo since the first implementation.

Cisco customer support is great.

The reason for this is that all of the Cisco TAC engineers at support are fantastic. They are available 24/7, and they do not leave sessions unresolved; when an engineer's shift ends, they assign a colleague to continue solving the case.

Before adopting Cisco Duo, I did not use a different solution.

My experience deploying Cisco Duo is great and went smoothly.

What went well is that you primarily need a license to access the main admin portal and at least two servers with minimum specifications, making it easy to configure. It is straightforward, requiring just one certificate.

I encourage anyone considering implementing Cisco Duo to move to Cisco Duo Mobile.

I did not evaluate other solutions from other vendors before implementing Cisco Duo.

Recently I have seen an increase in phishing attacks in our organization. These attacks feel like they are getting more sophisticated.

I did the integration with Active Directory instead of deploying Cisco Duo Directory to manage user identities. In the financial sector, Cisco Duo is fine as it is.

Regarding the price, the pricing of Cisco Duo is okay.

The main reason to implement Cisco Duo is that all of our data center infrastructure is Cisco. If we connect everything, the visibility will be 100%, which is why we need to cover everything with Cisco.

I am currently using Cisco Identity Intelligence.