External reviews are not included in the AWS star rating for the product.
I have been working with Cisco Duo for close to three years now. As an administrator and IAM consultant, I use Cisco Duo primarily for Single Sign-On, MFA, or integrating applications with different security protocols. The whole point of having Cisco Duo is to ensure that you have a centralized point of managing where all devices, users, and identities are in your system or infrastructure.
It helps in securing the applications.
I think Cisco Duo's identity intelligence capabilities are effective as long as you give the right policies to them. Defining your own set of policies is crucial to successfully utilizing the product's advanced features.
The thing that I appreciate the most about Cisco Duo is the ease of setup. The implementation team does not have to spend more time on implementing or integrating the product. Their responsiveness is commendable, and they are easy to adapt to new trends in the market, which suits our business needs. The pricing of Cisco Duo is also quite reasonable compared to other products.
The Advanced Identity Threat Detection and Response feature is similar to what I explained regarding AI and identifying threats.
Windows Hello is a new feature Cisco Duo has started using recently. It allows a user to connect to the VPN and get access to applications without needing to re-enter passwords. Once a user is authenticated against the VPN in Cisco Duo, the Windows Hello feature allows immediate access to applications without requiring another password entry.
Conversational AI in Cisco Duo is limited in its current application. AI might help identify trends or user behavior as a threat, but its implementation needs to be directed.
So far, I have not seen much need for improvement in Cisco Duo. It is user-friendly and reasonably priced, but it lacks some dynamic identity management features compared to other products such as SailPoint.
From a stability perspective, I find Cisco Duo reliable as both products are hosted through AWS, contributing to a good security posture.
I think Cisco Duo scales effectively with the growing needs of my organization. They are understanding our expectations regarding changes and feature add-ons.
I have raised many queries with Cisco Duo's technical support, and they have provided prompt responses. If I need further explanation, they get on a call with me.
The deployment of Cisco Duo is quite easy.
The implementation team does not have to spend more time on implementing or integrating the product.
Regarding the ROI with Cisco Duo, resource saving is significant. When we use Cisco Duo for Single Sign-On, employees only need to remember a single set of credentials instead of multiple passwords. The ease in password resets for admins further enhances their business efficiency.
The pricing of Cisco Duo is quite reasonable compared to other products.
I am currently working with ForgeRock and Okta as well as Cisco Duo.
Cisco Duo has been purchased by the enterprise or the employer who is actually using it from the vendor. They would help you with all the initial setup, and later on, as your team expands or the infrastructure mingles with other vendors or partners, you would also need the product to have some sort of customization for the business needs.
It is easy with Cisco Duo. I have seen one of the products which is quite easier. The branding makes it easier for the customer to trust that this is a product coming from a safe zone. The interface of Cisco Duo from the administration console point of view is quite decent.
I endorse Cisco Duo and say that you should go for it. It is quite a good product and quite easy to get used to. My review rating for this product is seven out of ten.
One year ago, I deployed Cisco Duo for one of my clients at my previous company because we are a Cisco Gold Partner company. My client wanted to deploy Cisco Duo on their remote access VPN. They have a Cisco FTD firewall, and mostly users join on weekends through Cisco AnyConnect. My client requested 2FA for these users, so I deployed the solution.
A few months ago, I worked on Upwork where one of my clients approached me and asked if I could install Cisco Duo for their small cybersecurity company. This presented a good opportunity for me because I am in Pakistan, and my client is in the USA.
Cisco Duo is a simple and effective tool that gives detailed information about users who connect to your domain. You can review the logs, including the public IP that the user uses, which country the user is in, and the city where the user is located. Everything is perfect in the logs. One tab shows that a user, for example Hasnain, is connected through remote access VPN and is using a specific public IP from a particular city in a specific country.
Cisco Duo offers a great logging solution in a Cisco environment. Additionally, Cisco Duo integrates easily with single sign-on apps, and I have used it on the Cisco ISE side because you can add the Cisco Duo address to your ISE and create the same user in both Cisco Duo and Cisco ISE. This makes it easy to manage, as Cisco ISE directly sends requests to Cisco Duo to verify, and the user logs in with a push notification or SMS code.
I am using many features in Cisco Duo, including logging in to Cisco ISE, sending requests when I log in to Cisco FTD through Cisco Duo, and checking 2FA on Cisco AnyConnect. Additionally, I have installed Cisco Duo app on my Windows-based machine, which checks for 2FA notifications every time I reboot the system or press Windows + L. This sends notifications to the cloud to check the username, and it also provides features that ensure the Windows Firewall is always enabled and verify that sensitive data partitions are encrypted. Moreover, it checks that antivirus is properly installed on the system. I also integrate my app within my company and have implemented single sign-on services through Cisco Duo, which is outstanding.
Cisco Duo could improve by considering feedback on features or requests for future releases.
When I worked on Cisco Duo, I encountered a limitation that I want to discuss. When a user logs in on a Windows machine using a Microsoft account, it is easy because you install the installer on your system and generate a code to enroll in Cisco Duo app. However, when I installed the package on the system, the user who was already added on Cisco Duo mobile app faced an issue. When I restarted the system, the screen turned black, and the user got stuck because we could not enter the username and password. After reading Cisco documentation, I learned that they do not support Hotmail addresses. This caused a problem since the user was using a Hotmail account. My client was very understanding about it, but I felt I failed to deploy Cisco Duo effectively. There are limitations because Cisco Duo does not support Hotmail accounts, which many people use to log in to their systems.
The two main limitations on Cisco Duo are first, the requirement to install the installer on my server, and second, that Cisco does not support Hotmail accounts. I regret this limitation due to Cisco not supporting Microsoft accounts.
I have been using Cisco Duo in my career for one year.
Cisco Duo provides scalability and smooth integration with some applications.
I have contacted Cisco customer support, which is highly remarkable. I open cases with Cisco regularly, and they provide prompt support for any case. Although I did not open any cases on Cisco Duo specifically, I have worked with many Cisco devices in my current network. Cisco support is notably above average; few companies match Cisco's technical and customer support capabilities when you are stuck on technical or pricing issues.
Positive
Regarding the pricing for Cisco Duo, I find that Cisco is always costly. In my current network, I work in a financial institute where we use 2FA for Fortinet, which is easy to deploy but not scalable. Implementing Cisco Duo is more complicated, but when you integrate the solution fully, Cisco provides a very comfortable experience. The pricing comparison shows a great margin as Cisco is costly, while Fortinet is less expensive.
I use Fortinet, which you can ask me about as an alternative two-factor authentication solution.
If you have any questions, you can ask me. I give this review a rating of 8.5 out of 10.
Cisco Duo is beneficial for me in terms of security.
I don't have much detail about the integration of comprehensive identity security into the Duo IAM solution, but my complaint is that it's not as seamless as a product like Zscaler for remote access. It's not as seamless.
It's difficult for me to summarize the room for improvement as I'm on the enterprise network side, not really security. My response will be based on user experience, not detailed technical aspects of the network with respect to security. I use ZIA and Zscaler for remote access connection, and Zscaler is seamless. I don't need to do anything; it does the identification of my system. As far as my system is issued by the company, I don't need to do any multi-layer authentication. It authenticates seamlessly. With Cisco Duo, you have to do that, and customers complain about that process. At some point, you need to be technically savvy to understand how to use Cisco Duo.
I have been using Cisco Duo for two or three years.
I've heard customers complain about latency in network usage.
Cisco Duo is very scalable.
I would rate the technical support of the product as a nine out of ten.
Positive
The deployment and installation process for Cisco Duo is quite straightforward, which is an advantage.
I do not track any ROI or return on investment.
I think Cisco Duo is quite affordable; it's not really so expensive.
The major difference between Zscaler and Cisco is that for Zscaler, there's a component called ZIA that has a Zero Trust aspect. The identity comes with the system issued, so you don't need any multi-factor authenticator per se. Your identity is matched back end to know that you are the one, and you don't need to do another level of multi-factor authentication, which users complain of being cumbersome.
I use ZIA and Zscaler for remote access connection, and Zscaler is seamless.
I am still working with Cisco products, and I still have the same portfolio. I don't work with the Cisco Secure Access product as I'm more focused on the enterprise infrastructure of routers, switches, SD-WAN, and data center. However, it's part of what I do, though not much of a call with respect to security, but it's something I'm interested in. I need to know what it does and if I can propose it to my clients.
I know Cisco Duo and have used it. It's not really a feature I handle regarding Cisco Duo's unified identity intelligence facilitating the understanding of user behavior. The security team handles that, and I don't have much visibility; it's purely transparent to me. However, I've heard them talk about it, and it really helps them to understand user behavior, mobility, and what they do on the network.
I would rate this review an overall eight out of ten.
The use case is good.
What I appreciate the most is that you can push a notification with your phone and log in to your computer. I use it to log in to my IT department. All the employees of the IT department can use it and another 2FA authenticated before they go in to log into a computer.
It needs to be made more comfortable for the customer and for the system administrator. The GUI environment could be improved. There is another issue with removing the application from your computer. It is difficult to remove the application on Windows. Additionally, if you don't have internet access, you can't access your computer, only local access is available. This is problematic.
I have been using this solution for three years.
There are no stability issues.
I am not familiar with any scalability issues.
I have used VIP OTP by Symantec.
The installation is easy. It consists of clicking next several times and then finish.
Cisco Duo is more comfortable because it is very user-friendly for the customer and it is very easy to set up and use.
The solution can be used by private customers. I would rate this solution as nine out of ten.