Duo Security

About Duo Security

Cisco Duo is a cloud-based workforce identity security solution that secures access to your applications, for any user and device, from anywhere. Easy to use and deploy, Duo provides identity-first protection and deep visibility across your identity ecosystem.

Duo verifies users' identities and establishes device trust in any IT and security environment:

- Multi-cloud, hybrid, and on-premises application support

- Diverse mix of operating systems and deep integrations with leading technology providers

- Unique use cases including supporting homegrown and legacy apps, securing third-party devices, and protecting Winlogon and RDP

Paired with deep insights into your users’ devices, Duo gives you the policies and control to manage access based on an endpoint’s health posture or user risk level which can change between authentication attempts. By providing simple, seamless end user and administrator experiences, Duo dramatically reduces your total cost of ownership.

Duo Continuous Identity Security combines Cisco Identity Intelligence with Duo Passport to stop identity-based threats and boost workforce productivity. Cisco Identity Intelligence adds a comprehensive protective layer to existing identity platforms and security tools. Gain visibility across your identity sources into multi-factor authentication (MFA) usage, admin controls, unmanaged device access, inactive or dormant accounts, excessive permissions, and more. Duo Passport eliminates MFA fatigue by minimizing authentication requests and friction in trusted scenarios throughout the workday. After login, Duo continually evaluates trust for every access request based on adaptive and risk-based policies and doesn’t prompt users again for authentication if the context remains the same.

Prior to granting access to critical resources, Duo verifies users’ identities with strong MFA. Duo passwordless and single sign-on (SSO) build on MFA to verify user identity with authentication tools like biometrics, FIDO2 security keys, and push notifications from the Duo Mobile app.

While establishing user trust is essential, you also need to have trust in the devices accessing applications on your network. Duo’s device trust tools deliver visibility into devices, assess their security posture, and continuously verify trust to allow or block access based on access policies.

Duo Device Insight inventories every endpoint and provides data on operating system, platform, browser and plugin versions, including passcode, screen lock, full disk encryption, and rooted/jailbroken status. Easily search, filter, and export a list of devices by OS, browser and plugin, and refine searches to find out who’s susceptible to the latest iOS, Android, Java or Flash vulnerability.

Duo Desktop, a native client app for macOS, Windows, and ChromeOS, enables you to enforce corporate device health policies such as checking OS version and patch level, password and firewall status, AV agent enabled, disk encryption, and management status.

Self-remediation enables you to block non-compliant devices at the point of authentication and empower users to bring devices back into compliance without contacting IT. Set up security requirements that automatically notify users of outdated devices, with direct links to update to the latest software version. Provide a grace period before application access is blocked, or block immediately with permissions reinstated once the device has been updated.

Duo Trusted Endpoints helps you define and manage trust for every endpoint, whether managed or unmanaged, company-issued, contractor-owned, or personal Bring-Your-Own-Device (BYOD). Create your own inventory of trusted devices with the option to add and remove devices, include a description, set a trust expiration date, and more. For organizations that choose to allow access only from managed devices, Duo supports native integrations with a broad range of leading mobile device management (MDM) solutions.