Cisco Duo is a two-factor authentication system (2FA), acquired by Cisco in October 2018. It provides single sign-on (SSO) and endpoint visibility, as well as access controls and policy controlled adaptive authentication.
$3
per month per user
ManageEngine ADSelfService Plus
Score 9.1 out of 10
Mid-Size Companies (51-1,000 employees)
ManageEngine's Self-Service Plus provides self-service password management, multi‑factor authentication, and single sign-on solution.
$295
per year for 100 users
Pricing
Cisco Duo
ManageEngine ADSelfService Plus
Editions & Modules
Duo Essentials
$3
per month per user
Duo Advantage
$6
per month per user
Duo Premier
$9
per month per user
Free edition
$0
No Expiration Offers most of the features for up to 50 users.
Standard edition
Starts at $295
per year for 100 users.
Professional edition
Starts at $345
per year for 100 users.
Endpoint MFA Standard edition
Starts at $195
per year for 100 users.
Endpoint MFA Professional edition
Starts at $295
per year for 100 users.
Offerings
Pricing Offerings
Cisco Duo
ManageEngine ADSelfService Plus
Free Trial
Yes
Yes
Free/Freemium Version
No
Yes
Premium Consulting/Integration Services
No
Yes
Entry-level Setup Fee
No setup fee
Optional
Additional Details
—
Failover and Secure Gateway Services add-on is $395
SMS add-on starts at $595 for 2000 SMS credits.
For secure access to apps and business data, I recommend Cisco Duo. It offers SSO, MFA, and Passwordless access, ensuring teams can securely access business data. It is easy to customize and comes with top-tier security features. It protects business data, apps, and users.
If you need users to reset passwords but don't have VPN access to your network, this is one of the best options. It also works very well for helping a locked-out user, provided they have taken the time to set up their account. Then, of course, they need to remember the details, but when they have dotted all of the i's, it just works.
We use Cisco Duo with different type of device and application, but we never face any difficulties to integrate Cisco Duo with any of them.
We integrated Cisco Duo with some of our active directory and some of the OS are quite old but Cisco Duo works totally fine with them.
The end user application is very easy to use. We never had any complain from non tech team members of having trouble of using Cisco Duo.
There are several authentication methods available rather than passcode. I personally like the push notification which is always on time and quite fast.
Should have device to device connection ability whereas internet is not met.
Changes of device can be sorted and easily made using a second email address or any other identification method.
Troubleshooting should be easy to sort out. One time, a Duo admin deleted the authentication group, and some employees were not getting push notifications. It was very hard to find out the cause. Duo should have some troubleshooting finder.
Sometimes push notifications are delayed, and the code does not work. At that time, we need to enroll the device again. Not sure why it happens. Duo should give reasons for the error.
There are a lot of competing solutions on the market; however, Duo "just works", and there is little to no learning curve for the new members to be acclimated to it. As long as that continues I see it as the preferred option moving forward
La interfaz es intuitiva y fácil de navegar, lo que permite a los usuarios administrar sus dispositivos y acceder a las políticas sin problemas. La integración con las aplicaciones SSO y SaaS facilita aún más el proceso de acceso, mejorando la experiencia del usuario.
its easy to use because of its user friendly interface, you can navigate it around it easily because of the layout of the pages and the prompts you receive when looking for information. the graphs come in very handy when you just want a quick overview of what's happening and the live updates are a handy feature also
In the last 5+ years we've been using Duo, there may have been 1 outage that impacted us. We do receive periodic notifications of issues but, for the most part, they impact carriers or functionality that we either don't use, or do not care about.
I have not needed direct support for Cisco Secure Access by Duo as I have not had a problem with it, but I have full confidence that the support is outstanding. It is now a core component of the corporate technology stack - a problem would mean a serious degradation in the ability of the company to function.
Documentation could have been better. I had to piece together different KB/admin guides to make certain things work and I also had to use third-party guides to get bits of information that were missing from Cisco Duo documentation. Support was also engaged multiple times to figure out an issue and after some back and forth it was usually determined that the information I needed was hidden somewhere else and had no direct correlation with the document that was linked from the platform.
Ultimately we ended up going with Cisco Duo because we are a Cisco shop. All of our networking infrastructure, our phones, our wireless environment is Cisco based. It made logical sense to stay with a product that we already have a line of support with. With a smaller support / tech group we depend on outside Cisco support. That support is already here for us, so we stayed with a Cisco product.
I have not used other products other than Microsoft integrated notifications, but those don't use email. I'm sure I could schedule a PowerShell script to send end-user emails, but it wouldn't be as customizable, and I'd need a separate report for admins.
Cisco Duo has saved us from automated attacks on VPN. We had an instance is 2024 where our VPN was being brute force attacked, and we had several users' weak passwords compromised; however the VPN security groups, and the MFA kept the attacks from gaining access. We've since replaced our firewall with capabilities for limitations on country access for VPN, and beefed up our password complexity settings,