VAST - Cisco Duo Implementation

Duo's multi-factor authentication (MFA) and device trust is a great start for enterprises to secure the workforce on their zero-trust journey. Increase your organization’s multi-factor authentication security protection with our expert Duo deployment services from VAST. Our professional implementations help reduce deployment risk, strengthen your application security posture, and improve your overall security environment knowledge and insight. Cisco Duo provides a high-level of security via their MFA solution to protect your servers and applications from bad actors.

License Inspection:

• VAST Engineer will inspect all licenses for quantity and type and ensure licensure matches expected entitlement.
• VAST Engineer will correct any licensing discrepancies, including License Application and coordination with Cisco Licensing until resolved.

Conduct Environmental Review:

• Ensure proper supported firmware versions on the protected device (upgrading firmware is out of scope).
• VAST will document and mutually collect environmental information with Customer, including host names, IP addresses, device details, and other necessary management information.
• Customer will assist in filling out Duo Authentication Proxy information.
• VAST will mutually determine location and design for the Authentication proxy; two nodes will be installed for redundancy.
• Provide Customer with a pre-deployment SOW.
• Review and deliver Solution Requirements Document.

Implementation Execution:

VAST Responsibilities:

• Work with Customer to set up Duo portal access.
• Configure Application in the Duo portal.
• Install Duo Authentication Proxy on agreed nodes.
• Configure the Duo Authentication Proxy.
• Configure network devices for two-factor authentication via RADIUS.
• Test authentication.

Customer Responsibilities:

• Provide access to the device for installing Duo Authentication Proxy.
• Provide access to the network access device (e.g., Cisco ASA, Meraki) for Duo RADIUS configuration.
• Allocate Migration Window for Go-Live.
• Provide Service Account for Active Directory Integration.