Duo Security

About Duo Security

Cisco Duo is a cloud-based access management platform that secures access to all applications, for any user and device, from anywhere. It’s designed to be easy to use and deploy while providing identity protection and endpoint visibility. Duo verifies users' identities with strong passwordless authentication and industry-leading Multi-Factor Authentication (MFA). Paired with deep insights into your users’ devices, Duo gives you the policies and control to limit access based on endpoint or user risk.

Duo verifies users’ identities in a number of ways, using two-factor authentication methods including SMS passcodes, phone callbacks, hardware tokens, and one-tap authentication through push notifications from the Duo Mobile app. Administrators can configure and enforce custom access policies and controls, including blocking user logins from specific locations, such as countries the company does not do business in. Application-based controls can also be set up, allowing administrators to define different two-factor authentication requirements for access to specific systems, such as requiring two-factor authentication for every VPN login attempt, but only once a week for Outlook access.

Duo allows users to create an inventory of user devices and use this data to identify vulnerabilities posed by outdated operating systems, browsers, and Flash & Java plugins. Users can be automatically notified of outdated devices, with direct links to update to the latest software version, provided a set number of login attempts before application access is blocked, or immediately blocked from accessing applications, with permissions reinstated after the browser or plugin has been updated. For organizations where certain applications have specific browser or Flash dependencies, self-remediation policies can be set up to notify only particular users of issues with specific plugins or browsers.

Duo’s Access Gateway offers a secure web portal to give Single Sign-On (SSO) access to employees who use 10 or more cloud applications. Applications are presented on a single page, giving users visibility into all available applications. Device security health checks are carried out every time a user accesses a cloud application, and user identity is verified without the need for them to re-authenticate each time they access an application.