Cisco Duo - Premier Edition

I implemented Cisco Duo  for my customer approximately one year ago. For the use case, we are using Cisco Duo  with VPN connection. When the customer VPNs to their environment, before they can access the VPN, they need to do the MFA of Cisco Duo.

I find the MFA, multifactor authentication, and Universal Prompt most useful in Cisco Duo. This is a SAML connection. The trusted endpoint and Windows Logon, MFA with Windows Logon, and RDP connection are valuable features. Cisco Duo can be integrated with many third-party vendors and third-party applications.

The main reason my customers started using Cisco Duo is because they need to have a multifactor authentication application to secure their application.

The biggest benefit of Cisco Duo for my customers is the license because they count licenses for the user. One user can use any application. If we buy a 100 or 200 user license, one user can use many applications integrated with Cisco Duo.

Passwordless is a good feature for customers to use Cisco Duo without prompting for the password. They can type the email address, and they can access their application continually and faster than before.

The return on investment my customers see with Cisco Duo includes having the inventory of their mobile and computer. They have Cisco Duo to do the inventory for them, and the MFA helps protect their application.

There are no major issues to improve in Cisco Duo because it improves continuously. Cisco Duo has many features separated by license tiers: Essential, Advantage, and Premium. They could consider moving some features from the next license tier to the Essential license tier, such as the health check of endpoint feature.

I have been working in my field for about six years.

Cisco Duo is stable, but occasionally there are emails about incidents that affect some services temporarily. The downtime and issues typically occur during maintenance windows at night. When incidents occur, they are not critical issues and do not affect users' ability to use the system.

Cisco Duo scales easily with the growing needs of the organization. It integrates with their Active Directory, so when they have a new employee, Cisco Duo will automatically synchronize the user. The customer simply needs to buy more licenses to expand to 1,000 or 2,000 users.

The support for Cisco Duo is excellent. I have opened one case, and they provide good support. I would rate their support 10 out of 10.

Positive

The price for Cisco Duo is reasonable. Their website lists $3 per month per user for the Essential license. For company or enterprise usage, the cost decreases below the website price.

They tested Cisco Duo with SafeNet for comparison.

I would rate Cisco Duo 10 out of 10. Using Cisco Duo's strong security authentication system is straightforward to configure and use.

Advanced Identity is in the next license tier. I am testing it in my company environment but not using it with any customers.

I am currently testing Cisco Identity Intelligence capability to detect and respond to identity-based risks.

Deploying Cisco Duo is not challenging. For the administrator, the deployment takes approximately one to two days. For customer employees to install the Duo desktop application on their computers, the time varies depending on the number of users. For 500 users, it takes approximately one month.

I recommend Cisco Duo because the MFA can integrate with many applications. When customers purchase it, they can integrate it with many of their applications, making it valuable.

The use case is good.

What I appreciate the most is that you can push a notification with your phone and log in to your computer. I use it to log in to my IT department. All the employees of the IT department can use it and another 2FA authenticated before they go in to log into a computer.

It needs to be made more comfortable for the customer and for the system administrator. The GUI environment could be improved. There is another issue with removing the application from your computer. It is difficult to remove the application on Windows. Additionally, if you don't have internet access, you can't access your computer, only local access is available. This is problematic.

I have been using this solution for three years.

There are no stability issues.

I am not familiar with any scalability issues.

I have used VIP OTP by Symantec.

The installation is easy. It consists of clicking next several times and then finish.

Cisco Duo  is more comfortable because it is very user-friendly for the customer and it is very easy to set up and use.

The solution can be used by private customers. I would rate this solution as nine out of ten.