Our VPN appliance currently uses LDAP-linked groups for Portal Mapping that allows access to specific networks for each group. However, it appears that with the Duo MFA config, we can no longer leverage groups because we have to replace the LDAP Remo...
Forum Posts
In D241, Duo released version 5.7.1 of the Duo Authentication Proxy. Please note that this includes patches for two vulnerabilities that result from the third-party Python ipaddress library. A first vulnerability rated as critical risk resulted from ...
Just seeing what Duo suggests and or other admins out there do for alerting if the “Duo Security Authentication Proxy Service” is stopped.
We allow customers to access applications using Citrix Remote Apps. We protect applications using Duo Authentication for Windows Logon and RDP. Duo prompts for 2 factor on the first connection. But once someone is already logged in another person can...
Hello, I was testing Duo AlmaLinux9 (RHEL 9 derivative) and found an issue with the Duo RPM registry. After getting some help from AlmaLinux community, I found out that that AlmaLinux9 (and presumably other RHEL9 derivatives) have disabled SHA1 signa...
Resolved! Password Protect RDP Uninstall
Is there currently a feature, or a feature in the works, that will allow admins to set a password requirement to uninstall the Duo RDP installation. I have not had any users attempt to remove it yet, but it would be best to get ahead of the potentia...
Anyone else having an issue with the “Duo Security Authentication Proxy Service” not running after post upgrade? Ours is set to automatic and I know this is just something we need to check anyways post upgrade/reboot, but just thought I would reach o...
In the most recent release notes it was noted that Windows 10 20H2 support is ending May 2022 to align with Microsoft’s End of Servicing policy. 20H2 for Education and Enterprise End of Servicing is until May 2023 though. Since Duo is an enterprise ...
Error message being displayed - Authentication of SSLVPN user [z@RADIUS] from ip was rejected, user isn’t in the right group msg_id=“1100-0005” Same issue as WatchGuard Duo Radius As with this post, I can successfully connect when I have a user setup...
I can get my user to authenticate via DUO SAML integrated with Anyconnect one time. The next time the user authenticates the Cisco Anyconnect Login presents the user with Can’t reach this page. What is interesting is the url displayed is not the fu...
Hello, I’m attempting to bypass 2FA for all users while at their main office with no success. I added their public IP to authorized networks with a newly created “Application Policy” for the “Duo Authentication for Windows Logon and RDP” protected ap...
I integrated with azure as idp for Duo security single sign on. But when I tries to log in it says invalid saml response. please find the saml response i am getting from azure. Please assit . TIA.
Hi all! Having a problem protecting Sophos UTM. I set up a LDAP proxy and configured the Firewall to use that proxy instead of the old NPS. This works well for the authentication to the VPN portal page. However, when I configure the same for the SSL ...
Hi, Preparing to deploy DUO MFA for a remote access VPN (SSTP) based on MS RRAS. Going to install DUO Authentication Proxy on the RRAS VPN server (member of our AD domain), primary authentication method will be Active Directory, planning authenticati...
Resolved! Duo as MFA IdP in AWS ALB
Hello, Either with Cognito or OIDC, is there any documentation or working case about setting up Duo as MFA gateway for an AWS ALB? I’ve found documentation accomplishing the same thing with Okta, but I don’t get it to work completely. Also, does Duo ...
