Policy & Access Control

We have an old Cisco ASA (5508) which has Duo configured for AnyConnect VPN, but using local accounts ONLY for Admin/Management. We are moving to a new FirePower device (in ASA mode) and want to enable some sort of SSO or MFA for Administrators using...

We have multiple, disconnected networks where we have the DNG installed. We’ve been using the RDP functionality for a while in beta and want to expand it to other networks now that it’s in GA. But I don’t see a way to add another gateway to the Heal...

I made a change few months ago under operating systems for one of the policy and now the operating systems are no where to be found under any policy.

Hello,how can create a script for duo device health agent that would always have the checkmark selected for "Launch DUO device Health when I log in"We are receiving a lot of users that are not able to connect to cisco secure vpn client due to DUO hea...

Is it possible to restrict self-enrolment so that it can only be done in a trusted environment, eg on premise or from a trusted device?  If inline self-enrolment is enabled, and a user who has never bothered to enrol gets phished, the attacker can si...

Good day all. I am not sure if what I am trying to do can be done directly, but perhaps someone can chime in with how to do this directly, or some form of work around or variable process to accomplish this.We use Duo Essentials and run our VPN servic...

What is best practice for setting up local admin accounts with duo - without adding a bypass code, or adding all the techs cell as an authentication method? I don't want every tech to get a notification each time one tech logs into a local admin. I k...

Good Morning, My district is fairly new to DUO. We are rolling this out to the whole district, and we are encountering some trust assessment problems. How do I resolve these issues. Most times, I am standing in front of the user when this happens.Unr...

There's certain administration personnel that need to access our organization's Outlook fairly frequently. Is there a setting somewhere to lengthen the amount of time between prompts when they try to access Outlook offsite on their phones? Once a day...

The intuition is requiring 2FA for a slight increase of security. I'm looking to give users the ability to either use the encrypted app or to use another means like a code via SMS or a phone system that isnt encrypted. Is this possible to set up for ...

Are there any plans to extend the MFA APIs in a way that would make Passwordless auth possible outside of Duo SSO? (Yes, I know this will require careful integration to ensure security is maintained.) In my environment, AD auth (and using Duo’s SSO i...

Hello all,I am currently running into an issue if a laptop is connected to our enterprise network (directly - no VPN), end-users are able to us 2FA and connect no issue.  Now if the same user connects to the public WIFI they will go through DUO 2FA l...