No more typing reviews! Try our Samantha, our new voice AI agent.
Stanislav Priscak - PeerSpot reviewer
IT specialist at Východoslovenský ústav srdcových a cievnych chorôb, a.s.
Real User
Top 20
Sep 23, 2024
Enhanced security with multi-factor authentication at a premium cost
Pros and Cons
  • "The most valuable feature of Cisco Duo for us is the multi-factor authentication."
  • "The price of Cisco Duo could be better."

What is our primary use case?

We use Cisco Duo for Cisco Webex smart remote client.

How has it helped my organization?

Cisco Duo improved our security posture. It improved our security.

What is most valuable?

The most valuable feature of Cisco Duo for us is the multi-factor authentication.

What needs improvement?

The price of Cisco Duo could be better.

Buyer's Guide
Cisco Duo
September 2026
Learn what your peers think about Cisco Duo. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
913,924 professionals have used our research since 2012.

For how long have I used the solution?

I have been using Cisco Duo for about three months.

What do I think about the stability of the solution?

The stability of Cisco Duo is very high. I would rate it highly.

What do I think about the scalability of the solution?

The solution scales well on a scale of one to ten, I would rate it an eight.

How are customer service and support?

We don't use Cisco Duo's support directly, only through our supplier.

Which solution did I use previously and why did I switch?

We used Microsoft Authenticator before switching to Cisco Duo because it was connected to other Cisco technologies.

How was the initial setup?

The initial setup of Cisco Duo was quite easy.

What about the implementation team?

Cisco Duo was implemented by our supplier, who set it up for us.

What's my experience with pricing, setup cost, and licensing?

I would rate the pricing of Cisco Duo as a seven on a scale of one to ten, which means it is quite expensive.

Which other solutions did I evaluate?

We evaluated Microsoft Authenticator before choosing Cisco Duo.

What other advice do I have?

I would recommend Cisco Duo for its reliability, stability, and ease of implementation.

I'd rate the solution eight out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Researcher at a tech vendor with 1,001-5,000 employees
Real User
Top 20
Mar 12, 2026
Log analysis has strengthened threat detection and builds customer confidence
Pros and Cons
  • "The best feature Cisco Duo offers is its simplicity."
  • "Cisco Duo could be improved with more interesting rules or correlation rules between all the data sources such as Windows and Azure."

What is our primary use case?

My main use case for Cisco Duo is to detect network-based threats.

There is one situation where malware is downloaded via a link, and Cisco Duo has blocked this URL, demonstrating how I use Cisco Duo as a detector for network-based threats.

We can correlate Cisco Duo with other data sources such as cloud and Azure, which represents another interesting scenario about how I use Cisco Duo.

What is most valuable?

The best feature Cisco Duo offers is its simplicity.

The interface is what makes Cisco Duo simple for me.

Cisco Duo has positively impacted my organization as we can analyze the logs to detect threats.

Analyzing logs and detecting threats with Cisco Duo helps customers gain confidence in our company, showing the positive effects it has had on my organization.

What needs improvement?

Cisco Duo could be improved with more interesting rules or correlation rules between all the data sources such as Windows and Azure.

For how long have I used the solution?

I have been using Cisco Duo for six months.

What other advice do I have?

I have not yet implemented Cisco Duo's end-to-end phishing resistance with capabilities such as proximity verification to strengthen my organization's ability to defend against modern phishing and identity-based attacks.

There are no other improvements needed with Cisco Duo that we have not discussed. I would rate this product an 8.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Google
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Mar 12, 2026
Flag as inappropriate
PeerSpot user
Buyer's Guide
Cisco Duo
September 2026
Learn what your peers think about Cisco Duo. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
913,924 professionals have used our research since 2012.
RyanDeppe - PeerSpot reviewer
Solutions Architect at Winslow Technology Group
Real User
Jun 21, 2023
Helps reduce the risk of a breach and is easy to deploy and onboard
Pros and Cons
  • "The ease of deploying Cisco Duo Security and onboarding has greatly benefited our customers."
  • "Cisco can further enhance the integrations, as they possess exceptional integrations with various providers' products and feature sets."

What is our primary use case?

We have been using Duo Security for authentication in our in-house sales operations technologies. Therefore, as a Cisco partner, we regularly recommend Cisco Duo Security to our customers to help secure their VPN environments or connectivity to business-critical systems.

How has it helped my organization?

For our customers, Duo Security is a significant advantage because it provides them with a straightforward method to implement MFA across their entire environment. Moreover, once we delve into the more advanced features of Duo Security, it enables us as a partner to engage in ongoing discussions regarding security strategies with our customers. Initially, we may only introduce them to MFA during the onboarding process. However, as their security strategy evolves, we can leverage Duo to perform additional tasks such as risk-based assessments and deployments, thereby assisting in the development of their security measures.

Duo Security helps secure our infrastructure. It serves as our gateway layer of protection, allowing us to understand who is logging in and why. We conduct risk-based assessments on each user to determine whether their actions are appropriate or not. Duo Security is not a comprehensive security solution, but it is undoubtedly a crucial component, a critical layer of security. This aspect resonates with our customers consistently.

Their ability to reduce the risk of a breach is of utmost importance. It serves as the primary line of defense. Currently, credential gathering and leaks are widespread in the market. By implementing an MFA solution like Duo Security, we can effectively prevent these issues. When we put a stop to credential harvesting, it becomes much harder for attackers to infiltrate and navigate our network. Therefore, Duo Security acts as an excellent first line of defense.

User authentication and device verification are the methods through which we envision our customers navigating in order to prevent identity-based attacks. Initially, when we employ Duo Security, it is a straightforward implementation of multi-factor authentication. As we progress, we enhance security measures by incorporating device risk assessment and potentially even regional assessment. This includes considerations such as whether the login is being attempted from a specific IP address. These gradual enhancements contribute to the establishment of an additional layer of protection. Thus, it is not necessary to implement a completely disruptive strategy right from the start. Instead, it is possible to gradually adopt and integrate this approach, following a crawl, walk, or run methodology.

The Duo Security self-service portal helps free up our customers' IT staff time, allowing them to focus on other projects. As a Cisco partner, we have received feedback from our customers that the portal is highly interactive, enabling them to easily navigate and resolve issues. After setting up their Duo environment, we rarely receive callbacks for assistance, as the portal is intuitive and empowers users to handle everything they need on their own.

The appealing aspect of Duo Security is its ability to establish trust for every access request, regardless of its origin. It is a cloud-based solution with excellent API integrations. It doesn't matter where or how a user logs in; Duo will be there to protect the user, whether it's through MFA, risk assessment, or similar methods. 

It is extremely beneficial to our customers that Duo Security considers all resources as external. Our customers frequently inquire about a zero-trust model, and this is a key component of it. Unfortunately, I would love to say that there is a simple solution for zero trust where we can just deploy this solution and be done with it. But that's not the case. It requires a layered approach, and that's what we convey to our customers. Duo Security is definitely a part of that.

Duo Security has helped improve our customers' cybersecurity resilience. Internally, it protects our users from accessing sales operations-based environments. Additionally, our customers use it regularly to protect business-critical applications.

What is most valuable?

The ease of deploying Cisco Duo Security and onboarding has greatly benefited our customers. When they have the need or requirement to implement an MFA solution, being able to swiftly set up Cisco Duo Security is perhaps the fastest and simplest feature available.

What needs improvement?

There is always room for improvement. Duo Security is a great product in its current state. However, Cisco can further enhance the integrations, as they possess exceptional integrations with various providers' products and feature sets. They should continue to improve and expand these integrations to include more products. The more integrations they offer, the more advantageous it becomes for us as a Cisco partner to promote and sell their product.

For how long have I used the solution?

I have been using Duo Security for one and a half years.

What do I think about the stability of the solution?

The stability has been excellent. I haven't heard of any issues, either internally or from our customers, regarding any problems with the Cisco Duo platform, the authentication VM, or anything of that nature.

What do I think about the scalability of the solution?

Scalability is excellent. Being cloud-driven, our customers are not concerned. They can simply purchase licenses as they need them, and scale up or down as required. Typically, scaling up and scaling out is the norm. The flexible licensing model and cloud-based delivery enable this process.

How are customer service and support?

Cisco support has consistently been exceptional, and Duo is no different. Although we seldom encounter issues, when we do, they usually relate to product integration or similar matters. However, these problems are never troublesome. The support documentation provided by Duo is superb, possibly even top-notch opinion. Therefore, even if we do experience an issue, more often than not, we can locate a solution within the existing documentation.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We have always used Duo Security internally. We have observed some of our customers replacing Microsoft Azure MFA with Duo Security due to its superior capabilities. Duo Security offers better compatibility and works seamlessly with various other vendors. Therefore, we have witnessed cases where customers replace their Azure MFA with Duo Security. In other instances, customers have chosen to complement Azure MFA with Duo Security. Some customers have investments in Microsoft that they do not want to lose, which is understandable. We acknowledge that fact. However, Duo Security is a highly complementary technology they may utilize for high-profile business applications or even VPN authentication. This is because it integrates well with their hardware or software.

The flexibility offered by Duo Security, its ease of operation, and the overall advantage of having the Cisco name behind it is significant. Knowing that Cisco is a global leader in security and backed by Cisco Talos is one of the primary reasons organizations make the switch. Consequently, it is straightforward to discuss with customers the benefits that Cisco brings to the table and how Duo Security can provide flexibility in their security strategies.

How was the initial setup?

Deploying Duo Security is extremely easy. As a cloud-based solution, we can have services up and running within a day.

What was our ROI?

What we have observed from some of our customers is that having an MFA solution like Cisco Duo Security in place actually reduces their premiums for cybersecurity insurance. This means that investing in MFA provides an immediate return on investment, as they are guaranteed to recoup the money. Many cyber insurance companies now mandate the inclusion of MFA features. If we do not have MFA, we either have to pay higher premiums or risk not having coverage at all. Therefore, deploying Cisco Duo quickly and effortlessly offers an instant ROI for many of our customers, allowing them to obtain the necessary coverage from their cyber insurance carrier.

If we meet not only MFA solutions but also other criteria within the cybersecurity insurance industry, savings could be upwards of fifty percent on our premium. This is because, as we deploy more security solutions, our level of risk decreases, as observed by cybersecurity insurance companies. Consequently, we become a lower-risk customer, leading to reduced premiums. However, if we don't have some of these solutions in place, there are two significant risks: firstly, we may not be covered at all, which is a considerable risk; and secondly, if we are covered, our premiums will be exorbitantly high.

What's my experience with pricing, setup cost, and licensing?

I believe the licensing model is excellent as it offers flexibility to our customers, allowing them to adopt a crawl, walk, or run approach. We don't have to sell the highest licensing feature set right from the beginning because they may not require it. Therefore, starting with the MFA license can be sufficient for them, as it helps onboard them and allows them to become comfortable with the solution. As they develop their strategy, we can gradually introduce them to different layers of Duo Security. This approach has been a successful business model for us.

What other advice do I have?

I give Duo Security a nine out of ten.

For those who want to enhance their cybersecurity, Duo Security is an excellent initial step. It enables individuals to eliminate easily exploitable vulnerabilities and embark on their security strategy journey. This journey cannot be completed in a single day, but Duo will assist in taking that crucial first step.

For those currently evaluating Duo Security, I encourage them to take advantage of the free trial. They can sign up at little or no cost and try the product to assess its feature sets and availability. Utilize this opportunity to thoroughly test and explore the product and make use of the available documentation. It's an excellent method to gauge the capabilities of Duo Security.

Which deployment model are you using for this solution?

Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
PeerSpot user
Senior Information Security Engineer at DAAC System Integrator
Reseller
Top 10
Jan 15, 2025
Security measures and seamless updates improve organization
Pros and Cons
  • "All features of the solution are effective, particularly those involved in identifying vulnerabilities and updates."
  • "My overall rating for the solution is ten out of ten."
  • "All features of the solution are effective, Duo supports BYOD policies by allowing users to authenticate securely from their personal devices."
  • "There was an issue related to integration with third parties."
  • "The customer service is okay. However, the response time could be faster."

What is our primary use case?

At this point, the primary use case of Cisco Duo is to secure access to systems, applications, and data through multi-factor authentication (MFA), and we use Cisco Duo, which we also provide to other clients. We implemented it and use it ourselves. The IT and finance departments should be involved in the process.

How has it helped my organization?

Simplified Access Management with a centralized admin control, security remote access even with their BYOD etc.

What is most valuable?

All features of the solution are effective, Duo supports BYOD policies by allowing users to authenticate securely from their personal devices. This flexibility allows employees to work from anywhere while ensuring that only secure devices can access corporate data. This has been very effective for our organization, and we have not encountered any issues. We use Cisco Duo and provide it to our clients as well. We implemented it and also use it internally. The IT and finance departments should be involved.

What needs improvement?

I found some issues yet do not remember them specifically. There was an project requirement related to facial recognition integration imbedded in duo.

For how long have I used the solution?

I have been using this solution for two years.

What do I think about the stability of the solution?

The stability of the solution is okay. We have not found any issues.

What do I think about the scalability of the solution?

Until now, we did not find issues related to scalability as we did not implement the solution at a large scale.

How are customer service and support?

The customer service is okay. However, the response time could be faster.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup consists mostly of demos, so it is not very hard to implement. 

Additionally, there is also online support available. The setup took around a week, depending on how big the infrastructure is.

What's my experience with pricing, setup cost, and licensing?

The setup cost is reasonable, estimated at around six euros per month.

What other advice do I have?

We did not find any issues. The clients who want to acquire this product need to change something in the security infrastructure by implementing MFA security authentication, like Duo, and so on. My overall rating for the solution is ten out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
PeerSpot user
Security Specialist at zeezsecops.com.ng
Real User
Jan 4, 2024
Effectively safeguards against unauthorized access attempts or server breaches
Pros and Cons
  • "They are users who, as mentioned before, utilize RDPAP and MDPAP. It includes functionalities related to finance, specifically in single sign-on."
  • "I believe there are two new features. I am interested in adding auto-admin services and incorporating icons for easier navigation. This could contribute to a new business idea platform. I have seen the features, and they make things easier, resolving issues from before. The platform has been updated, and there's now another link in my platform for media access. When it comes to improvements, the UI can be more user-friendly, and there is room for easier navigation. Perhaps there could be enhancements in customization. I haven't faced issues in storage or backup, but I am open to improvements in customization functionality. It's not my environment, but I see possibilities for improvement in the deployment of funds. The addition of new features is appreciated, and for customization, it could provide more freedom for users."

What is our primary use case?

On my end, Cisco Duo suits my account needs well. The application remains in place. We generally apply Cisco Duo across various use cases. Many customers, including banks and private organizations, use it for enhanced security, particularly in financial and general security tasks.

What needs improvement?

I am interested in adding auto-admin services and incorporating icons for easier navigation. This could contribute to a new business idea platform. I have seen the features, and they make things easier, resolving issues from before. The platform has been updated, and there's now another link in my platform for media access.

When it comes to improvements, the UI can be more user-friendly, and there is room for easier navigation. 

There could be enhancements in customization. I haven't had issues with storage or backup, but I am open to improvements in customization functionality. It's not my environment, but I see possibilities for improvement in the deployment of funds.

For how long have I used the solution?

I have been using Cisco Duo for the past year. Customers request server protection using various servers, and it can integrate with applications. It is an MFA solution, designed for server access and data security.

What do I think about the stability of the solution?

Typically, I manage things directly from the GUI, and I handle whatever comes up. So far, stability has been an issue, but I am not the creator of the solution, so I cannot predict future occurrences. 

Generally, it has been fine without any notable issues, but the future is uncertain. I would rate it 8 out of 10. 

What do I think about the scalability of the solution?

It is scalable and I would rate it 8 out of 10. Regarding the size of your customers, they are mostly large enterprises.

How are customer service and support?

We haven't encountered any significant issues so far. The only time we need to contact support is when something arises, and they promptly address it. Everything else has been running smoothly.

How would you rate customer service and support?

Neutral

How was the initial setup?

I would rate it seven because it comes with numerous features that require continuous upgrades. I have observed the need for consistent updates in the inventory. It is beneficial for newcomers to the platform, as data is continuously added, and automation has reduced the effort required to find information. It roughly takes 12 hours to be deployed.

What's my experience with pricing, setup cost, and licensing?

I am not aware of the pricing. There are two departments, and I don't have any information about them.

What other advice do I have?

Cisco Duo effectively safeguards against customer factors, such as unauthorized access attempts or server breaches. It provides a high level of protection, ensuring only authorized individuals have access to the environment. I am confident in its security features.

I would rate it 8 out of 10.

Disclosure: My company has a business relationship with this vendor other than being a customer. partner
PeerSpot user
reviewer2212659 - PeerSpot reviewer
Network Administrator Team Lead at a construction company with 5,001-10,000 employees
Real User
Jun 25, 2023
Establishes trust for every access request, no matter where it comes from
Pros and Cons
  • "It's easy to deploy. It's easy to manage. It's easy to integrate with other applications."
  • "The new smart license model doesn't always work. It's very complicated."

What is our primary use case?

We use it for multi-factor authentication. That's the only use case we have now. We're not using it to its maximum capabilities but we'll use it for more functions moving forward.

How has it helped my organization?

Duo Security has improved our cybersecurity resilience. Multi-factor authentication gives us another layer of protection. Having another layer of security is very important for us.

Duo Security establishes trust for every access request, no matter where it comes from. This is something that's absolutely needed.

What is most valuable?

It's easy to deploy. It's easy to manage. It's easy to integrate with other applications. 

We also use it for single sign-on with Meraki and VPN access for non-Cisco firewalls, but we're now migrating to Cisco firewalls. It's easy to deploy, and it works.

What needs improvement?

I'm not using it as much as I could. So far, it has everything I need. I don't have any requirements or improvements. Everything is working smoothly, and we're happy with it.

For how long have I used the solution?

We have been using Duo Security for about two years.

What do I think about the stability of the solution?

Its stability is great.

What do I think about the scalability of the solution?

We have 1,500 users that use Duo Security. We're planning to use Duo Security for more applications, but the number of users won't increase anymore, so in terms of scalability, I don't think we'll have any issues.

How are customer service and support?

We have opened some cases with Cisco for questions and things at all, and they were very helpful. They're very good. They answer questions quickly, and the people who work there are knowledgeable, so I can't complain. I'd rate them a ten out of ten because I got prompt responses and knowledgeable people.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We were using Microsoft Authenticator before, but we had a lot of problems with that, so we had to move away from that. Initially, we didn't have any multi-factor authentication, so having a multi-factor authentication for multiple applications and services that we provide helps us in making our network more secure.

How was the initial setup?

You synchronize your AD with Duo Security and create all the groups for access.  You send the emails to do the deployment, and you load the cell phone numbers. That's for the end-user side, and for the firewall, we have the proxies. We're using a proxy for one of the products. Our firewall sends RADIUS requests to the proxy, and the proxy communicates to Duo Cloud. The virtual machine deployment for the process was very easy. The configuration takes a few steps, but it's easy.

We've both on-premise and cloud deployments. We're using the tool on the cloud, but we don't have any infrastructure on the cloud.

What about the implementation team?

We did the deployment ourselves.

What was our ROI?

We have seen an ROI. The cost of not having it means you're vulnerable to hacking and other things. Nowadays, multi-factor authentication is required for insurance. It's a must now.

What's my experience with pricing, setup cost, and licensing?

It's very simple. Its price is fair. We use the hardware tokens as well. You get what you pay for.

In terms of licensing, Cisco has very complicated products, but Duo Security was surprisingly easy. The licensing model is easy. The license is based on the intent. You can see how many licenses you have. It's one of the easiest solutions I have deployed, so I'm very happy about it. Every other Cisco product—such as switches, APs, wireless, and controllers—has a very complicated license model. The new smart license model doesn't always work. It's very complicated. The vendors will put your license somewhere else. You need to talk to vendors. It's complicated, but Duo Security licensing is simple.

Which other solutions did I evaluate?

We evaluated RSA, Microsoft, and Duo Security. We evaluated these three, and we realized that Duo Security had better reviews, and it was easier to deploy and cost-effective, so it made sense to use it.

What other advice do I have?

Overall, I'd rate Duo Security a ten out of ten.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Kevin OShields - PeerSpot reviewer
Network Administrator at a energy/utilities company with 5,001-10,000 employees
Real User
Jun 22, 2023
A multi-factor authentication offering a good dashboard while being reasonably priced
Pros and Cons
  • "The administrator tool in the dashboard is the most valuable feature. It's really easy to quickly see if users are locked out from their device, firmware code, or just all the little dashboards and reports I can run to give the security for monthly reports. The dashboard's really good."
  • "The pain point for us at one point was the Duo Authentication Proxy since we're on-premises and not in the cloud. We had to have a proxy machine that's in our DMZ to talk to Duo for us. The configuration of that was a little complicated."

What is our primary use case?

Our general use cases are for multi-factor authentication for our networking and data center environment devices. We also do some SAML for our network monitoring tools with our different partners in our environment. With SAML, we use it for RADIUS and TACACS authentication.

How has it helped my organization?

The solution has definitely made our administrative access and privileged access to our data center architecture more secure by using multi-factor authentication. It's no longer just a password. You need to have Duo Push. It also helps the security team keep track of when people log in a lot easier, and you can just go to Duo Security to do that. The multi-factor aspect for us was the big reason why we chose Duo. We are Cisco, and it's integrated with Duo Security.

What is most valuable?

The administrator tool in the dashboard is the most valuable feature. It's really easy to quickly see if users are locked out from their device, firmware code, or just all the little dashboards and reports I can run to give the security for monthly reports. The dashboard's really good.

What needs improvement?

The pain point for us at one point was the Duo Authentication Proxy since we're on-premises and not in the cloud. We had to have a proxy machine that's in our DMZ to talk to Duo for us. The configuration of that was a little complicated.

For how long have I used the solution?

I have been using Duo Security in my organization's environment for eighteen months.

What do I think about the stability of the solution?

I never faced any stability issues.

What do I think about the scalability of the solution?

I never faced any scalability issues.

How are customer service and support?

The solution's technical support has been great. The only times I've ever had to call them was when I had to deal with Duo Authentication Proxy, and they were very helpful. They would go through your config and help you figure out any little pain points you're dealing with as far as integrating those different protocols, but they were fine every time I had a call. I rate the support a nine out of ten.

How would you rate customer service and support?

Positive

How was the initial setup?

Regarding implementation, it was a really quick project. I think we did PoC to the final rollout in six weeks. Duo Security is very integrated with other security and Cisco products, it took us around six weeks, and we had the solution up and running along with multi-factor authentication for all privileged access users in our environment. Previously, we just had a username and password. It was a big win for us.

What's my experience with pricing, setup cost, and licensing?

Price-wise, the solution has been very, very reasonable, especially since I like that you can scale, and they work really well if you need to expand quickly or retract. We haven't had any problems. Licensing is the last thing I think about regarding Duo Security because it's so easy, and I had no problems with it.

Which other solutions did I evaluate?

During our evaluation phase, we looked at Okta. For privileged access and for our authentication protocols like RADIUS and TACACS, Okta didn't have that functionality. They did SAML, so you could secure web apps or SaaS platforms or anything like that, but not our internal data center networking infrastructure. Duo Security was the only one that really had that capability. It was a really quick process. It's been great ever since.

What other advice do I have?

It is a very powerful tool when it comes to securing infrastructure from end to end. It makes authentications seamless for the users, and it's very well integrated with, like, Cisco ISE. It's not hard to maintain, and that was the biggest bonus. You don't want pain points for your users. Integration and the solution's seamlessness were the two big points.

Regarding my impressions of Duo Security's ability to help reduce risks and breaches, I would say that it is very high. The biggest pushing risk for us is insider threats, so mitigation requiring multi-factor authentication for privileged access reduces that threat surface. Duo Security was a really quick and really easy way to get a really quick win on that.

Duo Security's user authentication and device verification for helping to prevent and identify attacks is pretty good, especially for profiling the devices and for devices that have Duo's app in them. It helps us to understand the users of Duo about which firmware is running and whether they're possibly running firmware that could have some vulnerabilities. It's all in the dashboard. It's very easy to make reports and see them. It really helps people who use Duo, and they have their endpoint in there. It really helps us see a lot about their device.

It helps us save money and time, especially for identify privileged access users who are having problems logging into devices. We get it to automatically alert us, so we can be proactive about finding out what the issue is because if you see a lot of repeated attempts to log in to something, then you see that in Duo, it will email us, and then we can go to just investigate and remediate the issue. It's usually somebody with a bad password, trying to put it in many times, but you never can be sure. So it really helps us be proactive in the aforementioned situations.

Regarding my assessment of Duo Security for establishing trust for every access request, no matter where it comes from, I would say that it does pretty well. So, I don't know if I can talk more about this because we really only have certain avenues into privileged access devices, so I really can't say if it is from anywhere.

It is very important for me that Duo Security considers all resources to be external, especially from a principal security standpoint. It's a great posture to have, and I think that having that kind of posture is good for your security just inside your own network if you treat everything as external. They speak the same language security-wise that we look for in our organization. 

Duo Security has helped improve my company's cybersecurity resilience, considering that in our limited scope of where we use it, we are more resilient because of those formation things where we learn about issues proactively, and then we can actually mitigate them, and the report shows trends. So if we see trends, we can see what we mitigated, and we can look at those trends and see if there's a more focused approach than maybe a more long-term thing we need to look at or a bigger change we need to look at. I would say it's helpful from that point.

I would tell those planning to use the solution that Duo Security is a seamless and really transparent solution for its users, and it's very integrated into one's existing systems. Ease of implementation is for somebody who has to engineer a solution and implement it. The ease of implementation is one of the top five things. It's the ease of implementation and it's the integration in your existing systems that really sells Due Security for me. 

I rate the overall product a ten out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer2251362 - PeerSpot reviewer
IT Director at a comms service provider with 1,001-5,000 employees
Video Review
Real User
Aug 8, 2023
Considerably helps with identity in an environment without zero trust
Pros and Cons
  • "I lead an IT organization that has a significant amount of technical debt, and we're not in a zero-trust architecture yet. I'm pushing in that direction. Duo helps me considerably with my identity in an environment where I don't have zero trust. It's helping me bridge the gap until I can build a zero trust architecture."
  • "The only challenge is finding the right person sometimes. From what I've seen, being a named account is a big deal."

What is our primary use case?

My background is in electrical engineering. I have roughly almost thirty years in the industry, mostly in telecom, but the last ten years or so in enterprise. I'm currently in Anchorage, Alaska working for an organization that's Alaska-native company, which is more or less a conglomerate of different business lines. They work on everything from government contracts with NASA to construction to oil field operations, it's a lot of different businesses. 

Our Duo Security implementation was done about a little over three and a half to four years ago. It was about six months before I joined the company. It was done in response to a breach in the company that involved compromised credentials. 

I have personally been using Duo for as long as I've been in this company, so about three years.

How has it helped my organization?

We had a compromise of credentials and it resulted in a breach in the company. Had we had multifactor authentication at that time, we probably would have prevented that breach. In this day and age, I think multifactor authentication is an absolute requirement for anything you're doing. 

I lead an IT organization that has a significant amount of technical debt, and we're not in a zero-trust architecture yet. I'm pushing in that direction. Duo helps me considerably with my identity in an environment where I don't have zero trust. It's helping me bridge the gap until I can build a zero trust architecture. 

It has improved our cybersecurity resilience. Having multifactor authentication is critical because credential-based authentication is weak and it's going to be compromised. Having that additional factor in your authentication process is absolutely necessary. 

What is most valuable?

Right now, we're only using multifactor authentication. That's the most useful to us right now.

Reduction in risk is the whole point of multifactor. It's authenticating and augmenting the credentials and authenticating the individual that is trying to access your environment. It definitely reduces risk.

I would characterize Duo Security’s user authentication and device verification for helping to prevent identity-based attacks as good. It's intuitive for the users. It's easy to set up. The centralized management for our IT health service desk is good and doesn't take a lot of time. They're skilled with it. I really don't have any complaints.

The Duo Portal for our IT staff is efficient. It's utilized on a daily basis, and they're good with it. So I think it does allow staff to concentrate on other tasks.

I would say it's good at establishing trust for every access request, no matter where it comes from. Anything built by man can be broken by man. So there's always a challenge around that. They're trying to overcome those push bombing and challenges like that, and we're on that journey with them. 

What needs improvement?

Password management is difficult for us, especially for users. We would like to go passwordless. If we can go passwordless then you don't have a password manager. 

I am looking at other security features with Duo right now. We're currently looking at the passwordless options. We're looking at VPN displacement options. We're looking at those things right now. We haven't adopted yet. 

What do I think about the stability of the solution?

My impression of the stability is good. I haven't seen issues in the app, the portal, or anything.

What do I think about the scalability of the solution?

Scalability is there. Our organization is somewhere around 5,000 employees, and that is not very many users for a platform like Duo, so I don't see any issues with scalability.

How are customer service and support?

I've been using Cisco support for the better part of 25 years. I've seen good, I've seen bad. 

Cisco support has improved over the years, they tend to be better at getting back to you.

The only challenge is finding the right person sometimes. From what I've seen, being a named account is a big deal. When I came to this organization, they worked named accounts, and I worked really hard to become one because I knew the difference, and our support has greatly improved since becoming one. I have a person I can call and I know they can find the right person to help me get my problem solved. 

There are going to be problems with any system that's as complex as the products that Cisco sells. That's to be expected. It's really about how you get them resolved and how your partnership is there to make sure you're back up and running. Cisco, I believe, is really committed to that. 

I would rate them at an eight because there's no ten and because they have the in-house expertise to solve the problem once you can find them. They have the resources to bring to bear to solve just about any problem you can imagine. They are a committed partner. 

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I have personally used other multi-factor authentication platforms. I currently do personally use others. Duo was selected by the company before I came there, and I've been very pleased with it.

What was our ROI?

I would say we have absolutely seen ROI. We have not had another breach that involved a loss of credentials since implementation.

What's my experience with pricing, setup cost, and licensing?

The cost is very comparable to other solutions that I've used. I would in no way see any weaknesses in Duo over the other products, I would say it's a premium product, and it commands a premium price.

What other advice do I have?

I would rate Cisco Duo Security an eight out of ten.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Assistant IT Director at a government with 501-1,000 employees
Real User
Jun 22, 2023
Provides two-factor authentication, which adds an additional layer of security and easy user adaptation
Pros and Cons
  • "Duo Security gives us an additional layer of security that would give us added confidence that our network will be less likely to get hacked, compromised, or otherwise."
  • "There is a little bit of apprehension for some users thinking, well, "How do I know this app is not collecting personal information from my personal device?""

What is our primary use case?

We use it citywide. I work for a city, local government, and we implemented it during the pandemic.

We support it for remote access to our network. Every city employee is required to use it, including the police and fire departments. However, it's hard to concretely say if the solution has helped reduce the risk of breaches in one way or another.
Apart from that, we focus on user education in cybersecurity and provide training to our end-user population to heighten awareness. This is in addition to the two-factor authentication, so we don't solely rely on that.


How has it helped my organization?

Duo Security has improved our organization from a security standpoint. The two-factor authentication has become a requirement in most cases. It is specifically required by cybersecurity insurance.

Not only are we doing it for requirement purposes, but it also gives us an additional layer of confidence. Duo Security's additional layer of security gives us added confidence that our network will be less likely to get hacked, compromised, or otherwise.

Moreover, we're very satisfied with the solution for helping secure our infrastructure from end to end. It definitely gives us an added layer of our confidence knowing that two-factor authentication is implemented. In our organization, network-wise, the confidence level is fairly high, and we're happy with it.

The way we involve the end users is with their mobile devices and mobile phone numbers. Once they do get involved, we are pretty confident that they are being reached out to through the number that we have in the system for them, and there's really no reason on our end to doubt the validity of those authentication requests when they come through. We trust Duo Security for every access request, no matter where it comes from.

Duo Security has become essential to our environment, considering today's time when our workforce is becoming more and more mobile.

Duo Security helped our organization improve its cybersecurity resilience. It has given that added layer of security and keeps the awareness on the user's end as well.

What is most valuable?

It's easy to use, frankly. All it takes really is for the end user to download the app. For me, I have an Apple Watch; I don't even have to wait for my phone. I can accept the prompt right there and just be on my way.

Moreover, we are comfortable and have high confidence in the solution's user authentication; device verification can prevent identity-based attacks.

What needs improvement?

One of the challenges was for the police force. A lot of them, at first, weren't keen on using their personal cell phone for, quote-unquote, city business. As a city, we require them to download an app for two-factor authentication. There is a little bit of apprehension for some users thinking, well, "How do I know this app is not collecting personal information from my personal device?" was the only obstacle we ran into. Overall, satisfaction is good.

To mitigate this problem, there was an option where the city would choose to just go with utilizing the app. There's another option where you can get a text message as opposed to having to download the app and accept what the app has on it.

For how long have I used the solution?

I have been using Duo Security for three years. 

What do I think about the stability of the solution?

Duo Security is a stable solution. 

What do I think about the scalability of the solution?

We never encountered any issues in terms of scalability. 

How are customer service and support?

The customer service and support have been very good. We haven't had to call them many times. They've been able to assist every time there was an issue.

The responses have always been timely, and I haven't gotten any complaints from our security manager.

Which solution did I use previously and why did I switch?

We used a different solution but had it in limited use only for our public safety team. That was a requirement at the time because of the type of information that they had access to. We were looking for something versatile. 

With Duo Security, the easier user access and user adaption were a little easier. We felt the solution was a little clunky at times, and we are already in the Cisco ecosystem, and that's one of their products. So we decided that was the best solution at the time. That's why we switched to Duo Security.

How was the initial setup?

Implementation was fairly easy. Moreover, once you have it implemented, it's very minimal.

Duo Security doesn't require a lot of maintenance. From that standpoint, the solution has freed up time. However, it's not something that we had beforehand. In other words, it's not necessarily alleviating work. However, it is easy to manage.

What's my experience with pricing, setup cost, and licensing?

The pricing was a lot more than what we were paying for our previous solution. However, our previous solution only covered two out of the sixteen departments within the city.

It’s a bit of a pie chart in that sense but we understood that with Duo Security, we were deploying it on a broader scale.

Overall, the pricing was higher than our expectations, but considering the circumstances during the pandemic and the increased demand, we understood the importance of making the right decision and moving forward with the best product.

I would say we are happy with it. However, I haven't conducted any recent market surveys to compare pricing, so it's difficult to make a definitive statement. Ultimately, what matters most is the satisfaction of our end users, and in that regard, it is currently very high.

Which other solutions did I evaluate?

We did look at some other products. We had a security manager who was responsible for conducting the necessary research and legwork. However, he did present us with a few different solutions, and our network manager was also involved in exploring options. Ultimately, Duo Security was selected as the preferred solution.

And also, what happened right before then, we had attended Cisco Live, had been exposed to Cisco Duo, and really liked what we saw. So we went into it with a bit of bias, to be honest, because we already saw it.

What other advice do I have?

Duo Security is a great solution. The adoption and learning curve for the end user is low, in our opinion.

Overall, I would rate Duo Security an eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Sharon March - PeerSpot reviewer
Senior Director of Engineering Services at TD SYNNEX
Real User
Jun 22, 2023
An easy-to-install multi-factor authentication platform that offers speed and dependability at the same time
Pros and Cons
  • "Regarding the valuable features, I would say that Duo Security is easy to use, has speed, and is dependable."
  • "I wish that the support would be a little bit more prompt and a little bit more flexible because there are certain things that they will do and certain things they won't do."

What is our primary use case?

You don't need any other Cisco security products in order to use it. That's what makes it easy.

Normally, people use it for multi-factor authentication. It's an easy-to-install multi-factor authentication platform.

What is most valuable?

Regarding the valuable features, I would say that Duo Security is easy to use, has speed, and is dependable.

What needs improvement?

It would be nice if there was a biometric option rather where you could accept with a fingerprint. Like, in an iPhone, they have fingerprint authentication and face ID. It would be nice if there was a biometric acceptance as opposed to just clicking and accepting.

For how long have I used the solution?

I have been using Duo Security for thirteen years. I am a distributor of the solution.

What do I think about the stability of the solution?

Regarding stability, I don't know if that comes into question. With my clients, I haven't seen them facing stability issues.

What do I think about the scalability of the solution?

I have seen it deployed in an organization with 50 people and another with 5,000 people.

How are customer service and support?

I love the solution's technical support. Regarding the adjectives I would use to describe the support, I would say that the support was professional and accommodating. I wish that the support would be a little bit more prompt and a little bit more flexible because there are certain things that they will do and certain things they won't do. Then they push what they won't do back down to the distributor.

I also wish that they consider us as distributors because we're not the traditional partner. It's almost like we are Cisco. I wish that we could share more resources behind Cisco Firewall and behind Cisco's resources. I rate the support an eight out of ten.

How would you rate customer service and support?

Positive

Which other solutions did I evaluate?

The reason we chose Duo Security over its competitors is because it's a freebie that you can try and see how it goes. There is also the ease of integration with Duo Security. I don't really know of any other MFA that is as simple. With Duo Security, it's like, here's your authorization, and you need to click on the yes or no options.

What other advice do I have?

I would say that the solution does increase security because it does require MFA, and as long as the company enforces it installed on a specific device, it works.

It does not secure my infrastructure from end to end and detect or remediate threats. It's not the function of the product.

Regarding my assessment of Duo Security for establishing trust for every access request, no matter where it comes from, I would say that it is absolutely dependent on how the company deploys it. If the company says just deploy Duo Security on an old device, then it's kind of a hope.

 The whole point of having Duo Security is that it considers all resources to be external. 

Multi-factor authentication in general helped my organization improve its cybersecurity resilience. Any MFA will do that.

I would tell those considering having Duo Security in their organization that it's easy. You don't need to have every other Cisco product out there since I know that, for a fact, you can do it with Sophos and Fortinet. You can do it with other products, not just Cisco.

I rate the overall product an eight out of ten.

Disclosure: My company has a business relationship with this vendor other than being a customer. Distributor
PeerSpot user
Buyer's Guide
Download our free Cisco Duo Report and get advice and tips from experienced pros sharing their opinions.
Updated: September 2026
Buyer's Guide
Download our free Cisco Duo Report and get advice and tips from experienced pros sharing their opinions.