Duo 2FA is a solid and easy to manage solution
December 20, 2021

Duo 2FA is a solid and easy to manage solution

Jason Lane | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Review Source

Overall Satisfaction with Cisco Secure Access by Duo

We were required to introduce 2 Factor Authentication to meet insurance requirements due to a new policy change, we already utilized a Cisco solution for VPN access and we needed to cover Microsoft Exchange OWA access as well and Duo was a great fit. I had several options available but the demonstration for Duo was really straightforward and could be configured to our needs easier and more specifically than other 2FA options.
  • Provide a second layer of security with more than one option for verification
  • The App works with any smartphone and watch
  • Quick setup and really simple execution
  • There have been a handful of times when the Push prompt timed out
  • Some features seem to need added configuration options
  • The last app update changed the entire look of the app
  • Very inexpensive to cover 2FA security requirements alone
  • Per user based billing so as users come and go the bill will reflect this monthly
  • Several upgrade options that seem to have valuable features
This is simple to install the free app, simple to associate with the company. It requires an authentication setup on a local server but even this was very simple to do. Rules flow in the order they are built and if one supersedes the other then that is what happens. We were able to meet multi-site access without prompt and still challenge users from outside those IP ranges. As well as a few other configurations with help from Duo engineers fairly quickly.
This has helped to keep remote access to our network more secure. It would keep a laptop with stored VPN or browser-based OWA credentials (which we discourage) from being able to connect without approval from the device owner in the case it was stolen. This has seemed to work very well with only a few timeouts that required multiple attempts.
So far support has been very good with a ticketing system via email. They have helped with the initial free trial setup, then after the purchase, I needed to tweak rules to get it set up in the way we hoped it would and an engineer was quick to call us and assist in the config. They provided documentation first and offered to help over the phone. At least twice we were able to just follow the documentation to resolve our question or issue, and the times we could not they quickly were there to assist.
Each time we requested support they have come through quickly. I needed to build the setup and still allow all users to authenticate during that process. They helped me set up the Duo system so that Users that had not yet been created in the Duo console could still use VPN as they always had. This allowed me to build each user, work with them to get the app installed, associated, and tested before it was required. Very convenient.
The duo is highly configurable with multiple ways to authenticate. You can access a 6 digit refreshed code, we use the push feature that is life when your device requests a handshake Duo prompts the user automatically and very quickly, replying then completes the handshake. Duo also supports creating rules and user groups.

Do you think Cisco Secure Access by Duo delivers good value for the price?

Yes

Are you happy with Cisco Secure Access by Duo's feature set?

Yes

Did Cisco Secure Access by Duo live up to sales and marketing promises?

Yes

Did implementation of Cisco Secure Access by Duo go as expected?

Yes

Would you buy Cisco Secure Access by Duo again?

Yes

I give this a 9 just because a 10 is rare in software, however, each of our users has found this 2FA App easy to use and reliable. Installation was free and fast (you must allow this app notification on your device) associating the app with our company is a simple text message and worked very well each time. I can see that a new replaced phone would be a simple push update to get them going again. And it is really fast to authenticate.