Cisco Duo Recommended Easy to install easy to use easy to administer.
Use Cases and Deployment Scope
I use Cisco Duo for both Microsoft MFA and VPN MFA. All users are required to use MFA. all users are automatically enrolled using two radius servers, that sync to Cisco Duo. This solves our MFA initiatives for these two products. we decided that Cisco Duo was the better decision for this since microsoft was only for o365 products, and we would need another product for VPN (without creating a specific login process for Microsoft authenticator). Our accounts don't expire in Microsoft automatically with the AD sync, so Cisco Duo was the better choice since the password authentication happens with AD, not microsoft for VPN.
Pros
- user synchronization with AD
- ease of use for administration
- works well with both Microsoft and Cisco Secure client
Cons
- user setup process. users get confused if they don't want to install the app on their personal phone and use text instead.
- Users cannot set up their own devices when a device change occurs.
Return on Investment
- Cisco Duo has saved us from automated attacks on VPN. We had an instance is 2024 where our VPN was being brute force attacked, and we had several users' weak passwords compromised; however the VPN security groups, and the MFA kept the attacks from gaining access. We've since replaced our firewall with capabilities for limitations on country access for VPN, and beefed up our password complexity settings,
