Authentication Cloud vs. Cisco Duo vs. Symantec VIP

For secure access to apps and business data, I recommend Cisco Duo. It offers SSO, MFA, and Passwordless access, ensuring teams can securely access business data. It is easy to customize and comes with top-tier security features. It protects business data, apps, and users.

Incentivized

Symantec VIP is best suited in environments where you need two factor authentication. As explained before, Symantec VIP is super easy to use and manage for our users across our entire organization. If you have your users using a virtual private network, Symantec VIP is the way to go; no doubt about it!

Incentivized

• We use Cisco Duo with different type of device and application, but we never face any difficulties to integrate Cisco Duo with any of them.
• We integrated Cisco Duo with some of our active directory and some of the OS are quite old but Cisco Duo works totally fine with them.
• The end user application is very easy to use. We never had any complain from non tech team members of having trouble of using Cisco Duo.
• There are several authentication methods available rather than passcode. I personally like the push notification which is always on time and quite fast.

Incentivized

• The UI is intuitive and simple to use and navigate. When generating a secure token to be used for VPN access, all the navigation is clear and intuitive. There is no confusion when our users use Symantec VIP.
• Every generated token expires after 30-60 seconds, thus providing an extra layer of security and reducing any risk of someone re-using a token or pin to gain unauthorized access into our system.
• The app is super responsive and has no lag and little to no latency. Everything loads quickly and is super speedy.
• Our department can opt for a 6 digit code which we can use while logging in on different sites and SSO access can be easily set up and achieved with this tool.

Incentivized

• Should have device to device connection ability whereas internet is not met.
• Changes of device can be sorted and easily made using a second email address or any other identification method.
• Troubleshooting should be easy to sort out. One time, a Duo admin deleted the authentication group, and some employees were not getting push notifications. It was very hard to find out the cause. Duo should have some troubleshooting finder.
• Sometimes push notifications are delayed, and the code does not work. At that time, we need to enroll the device again. Not sure why it happens. Duo should give reasons for the error.

• when setting a token to a phone call, the phone calls often take a minute + to call the user.
• When Symantec's VIP app is removed or reinstalled on a phone, the credential ID will change, and that dictates a call to the helpdesk to allow the user access.
• Temporary security codes while handy, must be set to expire immediately to stay secure.

Incentivized

There are a lot of competing solutions on the market; however, Duo "just works", and there is little to no learning curve for the new members to be acclimated to it. As long as that continues I see it as the preferred option moving forward

Incentivized

La interfaz es intuitiva y fácil de navegar, lo que permite a los usuarios administrar sus dispositivos y acceder a las políticas sin problemas. La integración con las aplicaciones SSO y SaaS facilita aún más el proceso de acceso, mejorando la experiencia del usuario.

Incentivized

In the last 5+ years we've been using Duo, there may have been 1 outage that impacted us. We do receive periodic notifications of issues but, for the most part, they impact carriers or functionality that we either don't use, or do not care about.

We do not see any degradation of performance of the protected applications. There are occasional lags in receiving the push but no show stooppers.

I have not needed direct support for Cisco Secure Access by Duo as I have not had a problem with it, but I have full confidence that the support is outstanding. It is now a core component of the corporate technology stack - a problem would mean a serious degradation in the ability of the company to function.

Incentivized

Great vendor support, along with a great product solution

Incentivized

There was no in person training but checking the box was the only way I could complete all of the questions.

This was not organized training but the videos that Duo provides to teach you how to install a particular integration are top notch.

Documentation could have been better. I had to piece together different KB/admin guides to make certain things work and I also had to use third-party guides to get bits of information that were missing from Cisco Duo documentation. Support was also engaged multiple times to figure out an issue and after some back and forth it was usually determined that the information I needed was hidden somewhere else and had no direct correlation with the document that was linked from the platform.

Incentivized

Ultimately we ended up going with Cisco Duo because we are a Cisco shop. All of our networking infrastructure, our phones, our wireless environment is Cisco based. It made logical sense to stay with a product that we already have a line of support with. With a smaller support / tech group we depend on outside Cisco support. That support is already here for us, so we stayed with a Cisco product.

Incentivized

The Symantec VIP solution has a more easy implementation process, which makes implementation faster. The Prove Of Concept of the solution presents the best results compared with Duo. The final price charged was cheaper. Consultants that participate in the process get show to us in a more clear manner all scenarios where we can use the Symantec VIP.

Incentivized

So far, the only limits we've encountered were tied to our imagination. Duo's strong list of supported integrations is amazing.

• It's one of those things that only costs money in the sense of you have to convince a leadership team to spend money to save money, right? Like a compromise is far more expensive than duo paying for duo. So specifically it's really just about trying to prevent problems. And so while it costs money and we don't have a direct return on investment that we can point out immediately, I would still always advocate for it just because it keeps security. Paying for security is cheaper than getting compromised essentially.

Incentivized

• It was as easy to implement and manage as promised, so that definitely saved us time and frustration.
• It allowed us to improve on our existing PHI and PII security measures.
• Allowing secure access from remote locations, especially smart phones, was a huge plus.

Incentivized