Other Topics - Duo Security

We have multiple users utilizing hardware tokens, but one user has had to have multiple tokens assigned to him because they keep needing to be re-synced. The tokens will work for a bit, then start saying “Incorrect passcode” any time he tries to auth...

I would like to report on failed authentications outside the US and be alerted. What query do I need to run within Splunk to retrieve that information?

With the release of windows 10 1903 and 1909 Microsoft has implemented their own “windows security” popup that takes over when the yubikey is requested on a Duo protected website. The problem with this is when the windows popup is up users can not ch...

how can we create a report that shows all of the values for the administration settings?

Hello Team, Are there any documents to show the scaling or sizing recommendations of DUO Auth proxy and DAG? I checked the knowledge base and google with no luck. What values do we need to determine how many VMs are needed for a specific environment?...

We currently have the Duo Access Gateway installed in our environment and are also required to meet PC compliance. Our latest scan lists the following issues with the DAG. I have not been able to find any discussion around this and was hoping to get ...

A public forum for general cybersecurity questions and discussion. (And other topics.)

Hi everyone! We’re excited to announce the public beta of the Duo Device Health application, a new product capability that helps control which laptop and desktop devices can access corporate applications based on device security hygiene. With the Dev...

In case you missed it, I’m excited to share the 2019 Duo Trusted Access Report with the community. Each year, Duo Labs looks at data from millions of devices across our customer base to understand how people in all industries are adopting zero-trust ...

Hello! There’s a blog post I think those of you in the community would enjoy from security expert Wendy Nather. In it, she explores how the flexibility of zero trust improves security, as well as a company’s relationship with its users, customers, an...

Hi everyone! There’s a new tool available you will likely find useful if you write code in Python. We recently made Dlint, our approach to Python static analysis, publicly available to the community for your use, feedback, and contributions. Static a...

Read the blog from advisory CISO Sean Frazier to learn why not all 2FA is created equal. While it’s true that any 2FA is better than having none at all, some are more secure than others. How does the method you’re using measure up? Do you agree with ...

Good Afternoon! I’m an Owner use of a Duo implementation which has been active across multiple applications for several years. As an Identity and Access specialist, I rarely am heavily involved with Application setup, but my team does use the Admin...

We’ve released a new guide to help you understand the criteria for a zero-trust security model that can secure your workforce - both users and devices that access your applications. Learn about key components that help protect against threats such as...