Protecting Applications

We have successfully implemented Duo Access Gateway on a network and have it working. When using the launcher from a domain joined workstation we would like it to not ask for credentials to login. How can this be accomplished. Also when we access a ...

Hello, We are experiencing some odd slowness issues with our LDAP Proxy Server. When using a main Application that get’s used a lot with LDAP here at our school, normal login was under 2 seconds. When we changed the Application to use the Duo Proxy...

Hi I am currently trialling Duo for my company and so far we like the product. One issue I am struggling with is certificates. We have the Microsoft RDP client installed and working nicely 2FA’ing test users via push notifications on their iPhones. W...

According to the docs, you access the logs on a Linux DAG with docker-compose -p access-gateway -f <yml file> logs -f > <filename>. As far as I can see this dumps everything into that one file, and takes a while to run. Is there a more fine-graine...

Is it possible for Duo to log the service name accessed if MFA on a SSO to either Shibboleth or CAS? Example: MFA triggered via CAS SSO to Service ‘Foo’, will Duo have ‘Foo’ as application name in the logs?

We are using DUO DAG for our VPN users and we would like to change how the logon screen looks ( larger fonts and logon box ) to better support our Windows Surface users. Do we have any options with in the DAG?

We currently use DUO for our RDP connections, directly and without VPN (Port open on firewall). Have never had an issue. We purposefully don’t want VPN because we don’t need network level access and we don’t want people’s potentially infected remote...

I’m currently using DAG for securing applications in my environment, and am interested in the Duo Network Gateway but the documentation is a little hard to parse and I have a special case in which I’m using it. I have re-written the docker-compose fi...

Hi all, Brainstorming here… Deploying Duo to many Mac and Linux systems. There is pervasive use of SSH in the environment, much of it automated by using SSH keys as one would expect. I would treat the keys as “untrusted” since they are currently com...