Zero to 2FA -- Quickly and easily.

Duo Security is a simple low friction way to solve the problem of compromised accounts. At our organization, we had dozens and dozens of these. Users would fall for a phish and surrender their passwords. The hackers would then have access to their accounts to use them for their own purposes. Duo solved that problem. Even if the users gave away their passwords, the 2fa solution prevented hackers from accessing their accounts. It is amazing how painless it has been to implement it. So much so that we're moving toward rolling it out for students as well.

We had to scale up capacity for our AnyConnect VPN. We had to accommodate connections from a much larger number of users. Previously we had only a highly technical subset that needed VPN access. Now almost everyone needed it. We had to add additional hardware and a secondary VPN server to meet this need.

The Cisco ASA VPN allowed us to provide secure remote access to a large workforce. It allowed us to do this securely by easy integration with Duo Two-Factor Authentication. The user experience of the web portal is fairly intuitive so users were able to get up and running with minimal guidance.

Our employees and coworkers have generally been positive about the hybrid work environment. To the extent that our ASA VPN helped with this it did so by making access to on campus resources seamlessly available from off campus. It did this without sacrificing security but while still being very convenient.

There are a variety of roles that security plays. Without security our users wouldn't be able to rely on us for the availability of our services or the confidentiality of their sensitive data. There are also compliance goals and cyber insurance mandates that we need to meet by our security program.

We selected Duo (which was not Cisco at the time) because it offered the most user friendly and yet highly secure phishing resistant two factor authentication on the market at the time as far as we could tell. Other options were less user friendly, apparently less secure, and didn't support as wide a variey of applications.

We chose Duo because it offered ease of use and high security at the same time. We were able to integrate our existing applications with no trade-offs for security or for ease of use. We were able to role this out to increasingly wide subsets of users until it was required for everyone. We were able to do this with a minimal number of tickets to our help desk.

AI will be both an asset and an adversary. We hope that AI will empower security analysts by revealing insights that they might have missed and be assisting with technical tasks such as writing SIEM queries. At the same time adversaries will be using it to accelerate and scale their ability to attack us so we will have to grow in tandem with that.

Several of our security tools use behavioral analytics to spot threats early. But we do not think that a predictive model is sufficiently mature to advance us beyond what we are able to glean from traditional threat intelligence. Behavioral analytics and threat intel helps us to know what to prioritize but I wouldn't call it predictive detection a la Minority Report.

We needed to ensure we our systems were in compliance with new TLS requirements and they were able to quickly and painlessly provide a list of any recently seen devices that might need to be addressed by us so that we could look at them and see if upgrades were needed.

We did not purchase premium support. We've been highly satisfied with the support that available automatically at our subscription tier. I'm not even certain that their is a premium support tier that we don't have. It has never entered into our minds to want or be aware of it. They've always been able to quickly address or needs. We get a highly competent technical response from the get-go.