What I want to do is 2FA the RD Gateway – so anyone using the gateway from the internet has to use 2FA. I don’t want to make the branch users using the RemoteApp version of Act from ACT01 to have to 2FA – they’re already on machines in the physical s...
Forum Posts
Hi, So in testing Duo for my test tenant, I imported accounts via Azure Directory Sync. That went great. I created a Duo protected application for my M365 cloud apps. Worked great. So I noticed that I now have duplicate names. I see in some other pos...
Resolved! Child accounts & "Units/Sub-units"
Hello all, One of our customers bought licenses directly at Cisco & sadly not through our MSP program. Is there a way to add them to our MSP console? That’d help us for administration. Then, they’d like to implement a hierarchical administration: One...
I have been reading through the Duo guides to set things up in preparation for company-wide deployment. I am a little unclear on how to set up inline/self-enrollment for use with Windows logon (Microsoft RDP app). Basically, I would like to have the ...
I’m a long time sysadmin with RDS systems. Now decided to add duo for clients. The issue is that in my dev lab, my RDS server works and works well. Dev user can logon no issues and use applications. I have now installed Duo and configured it. After...
Resolved! WatchGuard SSLVPN with Radius
So setup WatchGuard Radius per Duo documentation. Setup AD User group VPN and added to NPS and also added to VPN group for SSLVPN on Firebox. When I go to authenticate with user get an error on Server “A RADIUS message was received from the invalid R...
Is there a way for me to change a user’s primary auth method from (example) Text to Push from the Admin console? Is the only way to change it for the user, themselves, logon to a resource that prompts them and change it there?
Hey everyone, This may be a silly question but I’m not super familiar with the inner workings of Azure AD when it comes to syncing accounts from my on-prem AD setup. We have an on-prem AD setup and we also use Azure AD Connect to sync internal users ...
Resolved! Duo access policy based on schedule?
We have a client who has specifically asked if he can block his staff from accessing their computers and/or email after hours. He values work/life balance for his employees and dos not want them taking their work home with them. I can see where this ...
We currently have Duo setup with AD FS and all is working well. I’m about to invite a large number of Guest accounts into our Azure AD but don’t want to have to purchase Duo licences for them all (I do want them to use MFA), Anyone setup AD FS in a w...
Hey guys, Hope you guys are doing well. I have implemented DUO for multiple customers and solution seems pretty good. But I have not worked on any other MFA solution and I wanted to know why is Cisco DUO better than other solutions
Hello, Lets say I have 2 applications configured. Radius for VPN and Microsoft RDP for desktop logins. I have 20 users enrolled. All 20 users must use MFA to connect to VPN. Now I only want 5 of my 20 users to require MFA for RDP. The other 15 e...
Free account here for my home lab - two admin users, and 3 regular users. I switched phones for Admin B, and when I try to login with that account and send it a push, it comes through, I approve, and then it puts up a dialog that says: Reactivation R...
This is the first in a new series of posts we’re trying out based on questions that come up often when talking with customers, either in the forum, support cases, or both! You can find the answer to many of Duo’s frequently asked questions in the hel...
Is there an API to find out the user’s choice of authentication method. This choice can be made during enrollment, however there doesn’t seems to be a way to get that information later. Thanks, Halley
