Protecting Applications

I’m unable to deploy the DuoWindowsLogon64.msi through Group policy on a Windows Server 2012 R2, clients keep getting error %%1603 from the .msi installer. Other .msi installers run without problems. Any advice?

We’re evaluating using Duo for our RD Gateway service, but I’m having a hard time with giving up our RAPs and CAPs. We use them extensively to lockdown our remote users. What are people doing without them? Simply relying on the user in question not b...

Just getting started with a free plan with Duo. Have installed it a Windows 2012 server and notice I keep getting push notifications on my phone even if I’m logged in and actively using the machine. Is there a log or anywhere else to see what is cau...

Is it possible to use hardware token for linux ssh logins, for RD gateways and for AWS services ?

I am the System Administrator for a software company and while implementing SSO for many of our corporate applications, I came across Intacct. There is documentation from Duo located here: Duo Protection for Intacct | Duo Security. There is one thin...

I have a suggestion … Duo Authentication Proxy Logs - a better way to read them. These logs can prove to be useful in troubleshooting but having them parsed and sorted for clarity and readability would be a big plus. thanks-

Hi. I’m looking for a way to find out how to configure a second factor as U2F Token using GlobalProtect of Palo Alto Networks. First of all, I’d tested it with passcode as a second factor provided by DUO, and it worked well. (Local authentication fir...

Is it possible to create a claims rule to allow POP3 connections to bypass MFA? This is our main remaining issue with Duo in our testing. We have a few POP3 accounts used for our ticket systems.

Our Security team wants to try out just protecting Email access (a.k.a, 365 web portal, and Outlook Desktop). What is the best way to go about this? Would these be Client application or Client user agent exceptions? Setting up autodiscover/activesync...

Any plans to integrate with MS Azure for admin authentication with 2FA?

Hi, We are using duo_unix-1.9.19-0.x86_64.rpm together with Centrify authentication on Red Hat Linux 6.7. You can see we are doing Centrify authentication first, then DUO authentication: more /etc/pam.d/sshd #%PAM-1.0 auth required pam_env....

Very new here to duo, so apologies if this is answered elsewhere. We would like to add security to our unix server for direct access (ssh), web access and email. I have already set things up for ssh and have some confidence that there is a path forwa...

Hi folks - I purchased some Yubico 4 Nano U2F devices for use with our Cisco AnyConnect VPN but I’m baffled as to how to add these things to the user accounts. My users get the AnyConnect application username/password/password window but and Duo is w...

Hello, I’m using pam_duo to add two-factor auth to SSH and sudo on my VPS running Ubuntu 14.04.5. I host a couple of websites on the server, and I want my users to be able to manage their files via SFTP without enrolling in Duo. I don’t want to give ...