Cisco Duo - Advantage Edition
Strong identity protection has improved branch VPN access and simplified threat detection
What is our primary use case?
We are a retail organization, not a service provider or integrator, with over 50 branches where we have implemented all Cisco products. I work with Cisco Duo as a customer. We mainly use Cisco Duo for MFA related to VPN, and we also have single sign-on and SAML-based authentication in our organization. We are not using the passwordless environment proposed by Cisco Duo.
What is most valuable?
From my four years of experience, the best part about Cisco Duo is that it is easy to use and relatively very straightforward, with multiple options available.
The best features I would highlight in Cisco Duo include the SAML-based authentication, which works well with all of the organization's applications. When it comes to security authentication, I find it is relatively easy when logging in.
We use the Advanced Identity Threat Detection feature in Cisco Duo, and it is also good because we have integration with the firewall which alerts us whenever there is any threat. With Cisco Duo's threat management capabilities, it shows the risk for a user.
For example, if I am the user accessing certain websites and if the traffic goes through the firewall integrated with Cisco Duo, it flags my user for any suspicious activity.
The conversational AI interface in Cisco Duo is relatively good, and we can utilize the integrated Copilot feature for any kind of documentation.
We have been exploring Cisco Duo Directory; although we have not used it extensively, we did the POC and it worked well. Cisco Identity Intelligence is a good feature that helps detect and respond to identity-based risks effectively because it integrates with Threat Intelligence.
I believe the integrations offered by Cisco Duo are good enough to satisfy our organization's requirements.
For how long have I used the solution?
I have been working with Cisco Duo for the last four years.
What do I think about the stability of the solution?
Cisco Duo is 99% stable and reliable.
What do I think about the scalability of the solution?
Cisco Duo is scalable with no limitations.
How are customer service and support?
Regarding technical support from Cisco for Cisco Duo, I feel it could be better. We often need to reach out to the Cisco Duo team through support cases, which are not integrated with Cisco TAC. If I had to rate Cisco Duo's support, I would give it a seven.
How was the initial setup?
Regarding deployment, Cisco Duo is relatively very simple, which I consider a good point.
What was our ROI?
Despite the price being quite high, I would rate Cisco Duo's value for money as seven out of ten. I rate it a seven because technically, the features are okay and very useful, but the price for the licenses is quite high. I see savings in terms of time and money with Cisco Duo. I would say that Cisco Duo saves us about 30% in time and money.
What's my experience with pricing, setup cost, and licensing?
Regarding price, I think it can be reduced; it is a challenge because our organization has informed us that we have the E3 license from Microsoft that includes MFA features, making it hard to justify paying for Cisco Duo.
Which other solutions did I evaluate?
I have evaluated some similar products to Cisco Duo; for example, I have the Microsoft E3 license, which provides Microsoft Authenticator. The biggest difference for me between Cisco Duo and Microsoft is that Cisco Duo benefits from much better integration with our environment rather than just being an MFA feature, as it offers advanced intelligence and threat features.
What other advice do I have?
Regarding Cisco Catalyst SD-WAN, I started working on it about two to three years back for some project related to Viptela. Currently, we do not have Cisco Catalyst SD-WAN in our organization.
We have several Cisco products in our organization, including Cisco ISE, Cisco Duo, Cisco FTD, and Cisco routers and switches. Overall, I would rate Cisco Duo nine out of ten.
FedRAMP-Ready Value with Responsive Support and Easy Portal Access
Easy to Use, Simple Navigation, and Quick Troubleshooting
Strong Security, but Repeated Prompts Get Frustrating
Cisco Duo Delivers a Smooth, Reliable MFA Experience with Strong Security
Extra Security, but Cumbersome with Phone Dependence and False Alerts
Fast, Easy Setup for Reliable Identity Security
Easy, Reliable MFA That Keeps Access Secure
Strong authentication and device checks have protected sensitive access and mitigated attacks
What is our primary use case?
Cisco Duo is primarily used for MFA configuration and to protect applications with the MFA requirement.
I can provide a specific example of how I use Cisco Duo to protect an application. We protect applications such as Microsoft login or internal applications. Before logging into any applications that require strict measures for our company, we add Cisco Duo before the authentication from Microsoft or internal authentication. Whenever there is a login request for a particular site, users are asked to enter the Cisco Duo push prompt or provide the OTP received via SMS or phone call. Without that, it will not authenticate the user to log into particular sites.
Alongside MFA, we use Cisco Duo for device health. For certain applications, we use criteria for people in senior leadership, ensuring that if their machine meets certain criteria such as having a firewall enabled, encryption enabled, and connected to a legitimate network, then and only then can they log into a particular site.
How has it helped my organization?
Cisco Duo has positively impacted my organization. We were able to mitigate compromised sessions by using Cisco Duo. In certain scenarios, when users receive MFA requests from unfamiliar locations, they know that it is not them trying to log in with their account, which has been the best feature we have used.
This has helped my users multiple times. Although I do not have an exact number, there have been instances, such as two or three times a month, where we have successfully mitigated the scenario. This has happened not only with regular users but also with senior leadership, showing that in both scenarios, we have been able to strengthen the environment through Cisco Duo.
What is most valuable?
Cisco Duo offers several best features, including a really cool interface. Anyone can become familiar with Cisco Duo in a day or two. Furthermore, the reporting, logs, and management capabilities are exceptional with Cisco Duo, which stands out as its best feature.
What makes the interface and management features stand out for me is that if I want to filter out the Android devices connected for a particular version, such as filtering how many users were connected using Android 13, I can easily filter that, which is not available in what we are currently using. This is a great feature. Additionally, there are custom criteria we can use in Cisco Duo, such as filtering by iOS or anything else we need according to our requirements.
What needs improvement?
I do not see any major flaws with Cisco Duo. According to our standards, we are very satisfied with Cisco Duo.
There is nothing I wish was a bit better, as what we need is already present in Cisco Duo, and as I mentioned, we have been using Cisco Duo for six to seven years.
For how long have I used the solution?
I have been using Cisco Duo for around six to seven years.
What do I think about the stability of the solution?
Regarding Cisco Duo's accuracy and reliability of output, especially in terms of authentication and security alerts, I find it very solid. Cisco Duo's accuracy and reliability of output is near perfect. You cannot go wrong with Cisco Duo's authentication policy and reporting. Everything can be easily trusted.
What other advice do I have?
I have not used Cisco Duo's AI capabilities as of now.
My advice for others looking into using Cisco Duo is that if you are really looking for a third-party application that can protect your organization or users from compromised sessions, then Cisco Duo is the perfect choice because it has the features and the trust of Cisco, making it really helpful for any organization to trust it blindly.
I would rate Cisco Duo a nine out of ten on a scale of one to ten. The reason I chose nine out of ten is that I believe no product is a perfect ten, so nine is the best that can be given to someone or any product.