My main use case when using Cisco Duo is MFA into everything: email, making teachers MFA, and mostly email. We are rolling it out to other on-site resources that we have as well.
External reviews
External reviews are not included in the AWS star rating for the product.
Managing security policies effectively with seamless authentication
What is our primary use case?
How has it helped my organization?
It has helped us significantly since we have many different applications and things of that nature to protect. Cisco Duo provides protection as we don't have a full cybersecurity team.
What is most valuable?
The feature of Cisco Duo that I prefer the most is the policies, being able to control what we need to within the policies. You can get pretty granular.
There isn't a lot of training that goes on in school districts. Email is an easy way where many people give out their credentials, so the level of protection is something that we definitely need in a school district.
Cisco Duo's strong security authentication system has been easy when logging in, although the teachers don't appreciate it as much. We have it configured so users essentially just hit accept. If it sees any sort of built-in risk, then it steps up authentication. It's pretty easy. I appreciate it.
I've encountered advantages with Cisco Duo in that it has stopped significant pushback from teachers. It has prevented credential sharing and unauthorized access. We've seen a huge decrease since we've rolled it out across the entire district.
What needs improvement?
Improving Cisco Duo might involve alerting us about telephony credits when people receive texts. We hit zero at one point, and we were running around in circles without any idea until I discovered it. That's my only complaint. Other than that, I appreciate Duo significantly.
For how long have I used the solution?
We have had Cisco Duo for a couple of years. That said, we just got it rolled out in our school district this past year. I have been more involved with it in this past year.
What do I think about the stability of the solution?
The stability and reliability of Cisco Duo are good. I haven't seen too many issues. Occasionally, a server will go down, but they send an email. They tell you who's having issues and that they're working on it. It has only happened once or twice over the couple of years that we've had it. It is very reliable, easy to use, and I don't have too many issues with it.
What do I think about the scalability of the solution?
Cisco Duo scales very easily with the growing needs of our company. We have 25,000 students and 5,000 teachers, totaling about 30,000 users, and it's very easy to add when new people come on. Rolling it out was very seamless, as we could do a whole campus at a time.
How are customer service and support?
The customer service and technical support of Cisco Duo is easy. It's really easy on the back end. I have no complaints. Dealing with customer service has been positive. I called them once about telephony credits, and I didn't have to sit through a queue. Someone answered the phone immediately and was very helpful. I would rate them a nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We did consider other solutions before choosing Cisco Duo as a school district. It has been so long that I'm not sure which ones, however, as a school district, we have to consider multiple options. We always evaluate all possibilities to see what's most advantageous to our system.
Cisco Duo fits the role since we're a Cisco shop. We typically lean toward Cisco solutions.
How was the initial setup?
The deployment of Cisco Duo is simple and straightforward. It's actually very easy. We tied everything to AD groups and would do one site at a time. We didn't mass roll out. I would move a group over, sync with Duo, and it would automatically send them an email. It's pretty seamless.
What was our ROI?
The biggest return on investment when using Cisco Duo is protection and 2FA into anything that we need. As a school district, people are always trying to get teachers' credentials and student information. It's very important to protect PII.
What's my experience with pricing, setup cost, and licensing?
My experience with the pricing, setup cost, and licensing of Cisco Duo is honestly above my pay grade. I don't know any of that.
What other advice do I have?
We haven't started using any new features or functionalities in Cisco Duo recently as we just rolled it out. We are currently using basic features. We're looking to do more with it as part of the process. Having a complete passwordless environment in our company would lead to less pushback from people who don't necessarily want MFA. It makes it simpler for them and smooth.
I do not utilize the feature called Advanced Identity Threat Detection and Response.
I don't know enough about Cisco Identity Intelligence capability to detect and respond to identity-based risks effectively.
I have seen yet not used Duo's conversational AI interface for admin tasks.
I would rate Cisco Duo overall at a nine out of ten. It's hard to be a ten, however, I don't have anything at the moment that they could improve.
Elevated security and seamless deployment enhance user and device safety
What is our primary use case?
We use Cisco Duo for MFA on all of our devices. We're exploring single sign-on right now, but haven't implemented that yet.
How has it helped my organization?
Cisco Duo has made us more secure. We've managed to stop some threats with it and keep our users and devices safe.
The benefits of a passwordless environment are pretty high. The biggest challenge that made us want to implement it was just the number of password resets that we have had to do. We had to send people to third-party vendors, and there were a lot of complaints. Being able to handle one password or one section makes our life a lot easier as IT, and their life a lot easier knowing exactly who to go to.
What is most valuable?
The UI of Cisco Duo is easy to use, especially the web backend, and it's really intuitive and easy to set up. The experience with Duo's strong security authentication system has been easy when logging in.
What needs improvement?
Cisco Duo can be improved with better ways to set users up. Currently, we might not be doing it perfectly as we're having them email in phone numbers to get them set up with Duo Mobile. I wish there was more of a self-service option than there is currently, at least to my understanding of Duo.
For how long have I used the solution?
I've been using Cisco Duo for five years.
What do I think about the stability of the solution?
It's pretty good. There was one outage, and they emailed us right away, so we were informed.
What do I think about the scalability of the solution?
Cisco Duo scales really well with the growing needs of our organization. Other than the licensing thing I talked about, we're able to add as many as we want, and we're at a little over a thousand with no issues.
We started with just our public safety departments, such as police and fire, but then we moved to the entire city staff. It went very well.
How are customer service and support?
I haven't used them much, but the one time I did, it was pretty seamless. They got back to us quickly, were nice, and gave us what we needed.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Prior to adopting Cisco Duo, I wasn't using another solution.
How was the initial setup?
Deploying Cisco Duo has been easy. The biggest challenge is getting all the end users on board, but in terms of software deployment, it's pretty painless.
What was our ROI?
We've seen ROI with Cisco Duo as it has brought our insurance premium down.
What's my experience with pricing, setup cost, and licensing?
It's a bit confusing because we're on a three-year plan with a certain number of licenses, and we've gone over that number. They told us that when we renew, they will add all these licenses. We've expanded quickly, so everyone's kind of scared because no one knows what the bill is with the long pricing cycle. We know what it's going to be-ish, but until we get the bill, it's kind of rough.
Which other solutions did I evaluate?
We considered Okta and Entra ID from Microsoft before selecting Cisco Duo. Cisco Duo looks modern, which I know is a weird one, but we have to think about the end user and what they see. There is also the ease of use. It seemed to fit seamlessly and had the most features. We already use other Cisco products. So using another Cisco product seemed like a no-brainer for us.
What other advice do I have?
Single sign-on would make things easier. We have a lot of different departments. They all have different needs. They use a lot of different programs. Single sign-on will be helpful for us.
Cisco Identity Intelligence’s capability to detect and respond to identity-based risks effectively is very good. We're exploring using that a little bit more. It's always great to be able to look through and see if people's devices are out of date and things like that, for addressing security concerns.
My advice to other organizations considering Cisco Duo is to do it. It's easy and was the option that fitted our needs the best. It was also painless. What more can we ask for?
I would rate Cisco Duo a nine out of ten.
Push notifications improve security and convenience for faculty and staff
What is our primary use case?
My main use case for Cisco Duo is that we use it for two-factor authentication for all of our faculty and staff. We don't use it for our students, however, we implement it for faculty and staff.
How has it helped my organization?
The features of Cisco Duo improve our company by increasing security since they're relatively simple to use.
What is most valuable?
The feature of Cisco Duo that I appreciate most is the push notifications. They are great. I'm glad that they can be accessed from my watch personally. Many of our staff use the phone calls so they can just answer and press one without needing to pull out their mobile phone and get the code.
From a management perspective, I appreciate that we can enroll or control devices on the back end for people who get a new phone and forget to handle Cisco Duo properly and need to add a new device.
It makes logging in easier than alternatives.
What needs improvement?
Cisco Duo could be improved if there were a way to make two-factor authentication quicker. Sometimes it takes a few seconds to jump from page to page during its login flow.
For how long have I used the solution?
I have been using Cisco Duo since probably 2020. It's hard to determine the exact timing with COVID. That's when everything started.
What do I think about the stability of the solution?
Regarding the stability and reliability of the Cisco Duo solution, we have experienced some outages over the last few years that are significant because people can't log in.
While we wouldn't want those outages, they haven't been catastrophic or terrible enough to make us consider looking elsewhere.
What do I think about the scalability of the solution?
Cisco Duo scales with the growing needs of my company. While we don't grow significantly as a university compared to some other companies, it scales appropriately for our size.
How are customer service and support?
I haven't had to interact much with customer service and technical support of the solution, so I don't have substantial feedback to provide.
Which solution did I use previously and why did I switch?
We use two solutions on campus: Cisco Duo for faculty and staff, and Microsoft Authenticator for students. The main difference between the two is that Cisco Duo appears more reliable. Microsoft Authenticator seems to have more friction and breaks down more frequently, meaning users might complete the authentication flow but still not authenticate properly.
Our students use Microsoft Authenticator, and we get more negative feedback from that than we do from Cisco Duo. Cisco Duo works better than Microsoft Authenticator. Not everybody prefers two-factor authentication, however, Cisco Duo has the least friction of the two solutions we use.
How was the initial setup?
The deployment experience of Cisco Duo was relatively easy compared to other similar projects we've rolled out. This implementation seemed straightforward.
What about the implementation team?
We had good support and guidance with the implementation, and we relied heavily on skilled people at Cisco to help us implement it properly.
What was our ROI?
Regarding the return on investment when using Cisco Duo, separate from the financial aspect, I cannot answer that thoroughly.
It seems valuable and performs better than our other solution for faculty and staff, so I would hope it provides a better return on investment. I'm not familiar with the financial details.
Which other solutions did I evaluate?
We have not considered other solutions while using Cisco Duo in the last five years.
What other advice do I have?
In evaluating the benefit of having a complete passwordless environment in my company, we're not entirely passwordless since we use Cisco Duo for two-factor authentication. We still authenticate with a password before being moved to a Cisco Duo page. If there's a passwordless feature, we're not utilizing it.
Regarding challenges when using Cisco Duo, issues are usually client-side related, such as someone's phone not working correctly.
Regarding Advanced Identity Threat Detection and Response in Cisco Duo, I don't believe we utilize it. I have received inquiries when I've authenticated from new locations, however, I'm not certain if that's part of this feature.
My impression of Cisco Identity Intelligence's capability to detect and respond to identity-based risks is satisfactory.
I have not used Cisco Duo's conversational AI interface for admin tasks.
I would rate Cisco Duo overall as probably an eight out of ten.
Works very well and gives an extra level of security with Verified Duo Push
What is our primary use case?
Cisco Duo is for multi-factor authentication for all of our users and securing our assets off-campus.
How has it helped my organization?
Cisco Duo has benefited our company overall by giving us the ability to have multi-factor authentication. At the time, we didn't have any other in-house options. While going through the process of identifying a vendor, Cisco Duo was by far the cream of the crop, so we went that direction, and we've been there ever since.
What is most valuable?
The Verified Duo Push feature is valuable. It gives an extra level of security beyond just the regular push. Before that came out, we had a few instances of people getting compromised, pushing the button because they thought it was something else they were doing, and it turned out to be an attacker compromising their account. We were able to enable that pretty much as soon as it went into production, which drastically cut down on any issues.
It's been pretty easy. There haven't been too many challenges. It does what it says it does. It's easy. It's straightforward. It's not a hard process to do anything with it. Even though we don't take a lot of advantage of it, there are always new features that are coming out. It shows that Cisco puts time, effort, and development into it.
What needs improvement?
I would appreciate seeing Cisco Duo improved with a tighter integration with Active Directory to secure not just Remote Desktop to a server, but all the remote levels of connection that you can make to a server.
Other than that, there can be a better way to onboard users who don't want to use a phone, but that's stretching it because we can do a token or order Cisco Duo tokens, or do FIDO keys.
For how long have I used the solution?
I have been using Cisco Duo for 10 years.
What do I think about the stability of the solution?
The problems we've had with Cisco Duo have been very easy to resolve, and the team has been very helpful in providing solutions. It's not one that we've had a lot of challenges with. A couple of times, our Cisco Duo region might have had an issue, but there was very clear communication, and it was resolved pretty quickly. It's been great, and I don't have a lot to say because there haven't been many problems.
What do I think about the scalability of the solution?
Cisco Duo has scaled great with the growing needs of my company. It scales easily because it is just tied into our identity provider, and it grows along with that. I don't have a lot of specific examples because it's just something that's there. It works, it's reliable, and I don't have to think about it too much.
How are customer service and support?
Their team has been very helpful in providing solutions. I would rate the technical service and customer support of Cisco Duo a ten out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
It was easy. The difficult part was just the culture shift and making people understand why multifactor authentication was important and why we were using Cisco Duo. Even if you're a retired faculty member who doesn't do anything, you still need to protect your account because it's a doorway into our system. We need to make sure it's secured. Once we got through those hurdles and it was adopted, the problems were few and far between.
What about the implementation team?
The implementation involved using Cisco Duo services, specifically the concierge service for onboarding, which was excellent. They provided a lot of information and templates for sending out registrations and notifications of what we were doing. They walked us through any technical challenges, which I don't remember having, so it was all a very smooth and good experience.
What was our ROI?
From my point of view, the biggest return on investment when using Cisco Duo is the security and the ease of setting it up. It's easy to enroll, the email goes out, and the user can just download the app and set it up. We're not having to provision tokens and email them out or make people come to campus and stand in line to register a device.
What's my experience with pricing, setup cost, and licensing?
My experience with the pricing, setup cost, and licensing of Cisco Duo has been great. We've been there for 10 years. While we haven't gone through the setup part for a while, licensing is straightforward and convenient for higher education because student populations are included. So, we don't have to pay extra for it. We just pay for our knowledge workers, which has been great, and the cost is reasonable.
Which other solutions did I evaluate?
While using Cisco Duo, we have looked at Microsoft Entra ID because it includes MFA and could probably do the bulk of what we do. However, when we look at it, it doesn't do everything fully, so we still have to keep Cisco Duo. It doesn't make sense to have half our users use that and the other people use Cisco Duo, so we just keep it all in one and use Cisco Duo.
Cisco Duo's reliability is definitely better. The app experience is definitely better. Our test users have had a lot of challenges with Entra ID that our Duo users don't have.
What other advice do I have?
Other than the verified push, my company has not really started using any new features or functionalities in Cisco Duo recently, but we are looking at going to a more zero-trust type of setup. We've been looking at how to leverage Cisco Duo better without hugely increasing the expense of our authentication systems. Currently, we have it integrated with Entra ID and our Active Directory environment. We are looking at how we can expand that out and improve our security on campus.
We have been with various vendors for a complete passwordless environment, and we've tried doing it with Entra ID but have run into challenges with some vendors that still require a password in their SAML authentications. I haven't really validated the Cisco Duo portion of it yet, and I'm not sure what all that entails at this point. I know it can be done, but we haven't implemented it yet.
I would rate Cisco Duo a ten out of ten.
Enhances security through online and offline authentication
What is our primary use case?
My main use case for Cisco Duo is MFA.
What is most valuable?
You can do online and offline authentication. It benefits my organization by adding an additional layer of security and keeping us more secure, whether the person is corporately connected or out in the field.
The feature that my organization started using more recently in Cisco Duo is offline authentication. It has given us the evolution into offline abilities for when they are out in the field or traveling, and they are not connecting to a known network.
What needs improvement?
Cisco Duo can be improved by exploring a way to make it a more seamless integration and by deploying an in-house server.
There has to be a way to make the whole process of push notifications easier, so that when I have my phone with me, I do not have to do anything. It pushes it to my phone and says, 'Yep, that's Roger,' and sends a reply back. Getting in should be totally seamless.
For how long have I used the solution?
I have been using Cisco Duo for two years.
What do I think about the stability of the solution?
Cisco Duo has been very stable. When there is a bigger problem, we get notifications from Cisco Duo saying, 'Hey, we have a problem,' and that has helped us.
A couple of times, we have had some downtime, but it has not been anything that has interfered with daily productivity. We have had a random crash here or there. With the restart of the system, it goes away. It is not something for which we have been able to identify the reason.
What do I think about the scalability of the solution?
We have not grown in size with Cisco Duo. We have added additional features over time, and it has grown with us rather well. We started out with just the basics, getting a token, and then we changed to push, and now, we have added the offline mode. We have integrated Cisco Duo into other websites, so now it pushes notifications from our websites into our mobile devices, so we get push notifications from it.
How are customer service and support?
Cisco support is not good to start with. Everything stays the same; the Duo support has been timely in responding to emails, but other support sections have failed miserably because of the lack of response time, the lack of the ability to answer questions, and the lack of tracking down an expert who can help. I can continue for hours over what they have done wrong on that.
How would you rate customer service and support?
Neutral
How was the initial setup?
The setup was not the most complicated thing that I have had to deal with. It has been a little bit easier to set up than some of the other things.
Getting the files to set up virtual servers for it was a little more time-consuming. That was probably the hardest part of the whole thing.
What was our ROI?
I have not seen ROI with Cisco Duo; probably the opposite, because it impedes productivity time to be able to get into the system. You have to authenticate and do your regular login and your Active Directory logins. When you add that up, five minutes a day, five times a day, five days a week, you have lost two or three hours of productivity just logging in.
What's my experience with pricing, setup cost, and licensing?
The cost was reasonable. Licensing was pretty straightforward for a change.
Which other solutions did I evaluate?
We looked at other solutions, but because we already had Cisco solutions in-house, we talked to Cisco Duo people two years ago at Cisco Live, and then we made the decision to move to Cisco Duo after that. There's always room for improvement in everything, but the integration that they have works very well with everything that we have.
What other advice do I have?
Our experience with Duo's strong security authentication system when logging in has been moderate. It is a people problem because you have to get people educated and up to speed on how to do things and how to set up their tokens and get everything situated. Once it is all said and done, it is not complicated, but you have got to get people educated on how to make this stuff work.
My advice to other organizations considering Cisco Duo is to make sure of the products you want to support and how they integrate the MFA functions before you consider it. Because if your products do not support it, it may not do you as much good as you want. If they do support it, it is a great way to add additional layers of security, not only to your computers but website logins and other avenues of hardware protection.
I would rate Cisco Duo an eight out of ten.
Offers strong security and ease of use
What is our primary use case?
The main use cases for Cisco Duo are for multi-factor authentication and being able to bring your own devices securely.
We don't use Cisco Duo in our organization. We sell the product to our customers.
What is most valuable?
It is very easy. Having just wrapped up my tenure at Cisco, it was used day in and day out for security. It was always easy to log in and not have to worry about logging in multiple times.
As a former employee, I think it's top-notch when it comes to protecting internal and external threats and preventing unauthorized access to the network.
What needs improvement?
Cisco Duo could be improved, possibly by adding features for the healthcare space. If you're selling something to a healthcare provider, there needs to be consideration for how to launch Cisco Duo with a handheld device that is not native, where you can install the application.
For how long have I used the solution?
We have been working with Cisco Duo for at least four or five years.
How are customer service and support?
I would rate their technical support a seven out of ten based on how they respond to issues.
How would you rate customer service and support?
Neutral
What was our ROI?
There is certainly ROI with Cisco Duo, assuming that you can get the other MFA type products uninstalled, and customers truly understand why they purchased Cisco Duo in the first place.
What's my experience with pricing, setup cost, and licensing?
From a reseller perspective, it's still challenging to explain the whole license strategy to a client, so we really have to be ahead of that for all the true forward conversations.
Which other solutions did I evaluate?
We did not consider many other solutions before Cisco Duo. I am biased towards Cisco because I came from Cisco, so I am more familiar with it.
What other advice do I have?
The benefit of having a complete passwordless environment is more of a conversation that we have with our clients. There is ease of use. We focus on what outcomes they are trying to achieve with the different personas they're using and the security protection in their workplace. There aren't any disadvantages to the passwordless environment, but it all boils down to what our customers are saying about the product that we sell to them. I haven't heard anything negative about Cisco Duo.
I would rate Cisco Duo overall an eight out of ten.