Our main use cases for Cisco Duo are to start using it for multifactor authentication and then to enforce the controls around endpoints and user behavior, and also the Identity Intelligence part to ensure a holistic approach around identity security.
As a CISO, I like the Cisco Duo Identity Intelligence feature the most because it allows me to collect a lot of insights and reduce the time to detect issues on identity.
An example of how Cisco Duo helped in my organization is that we reduced the time to detect anomalies in user or identity usage within our organization.
Now with the automation in Cisco Duo, we are able to open a ticket in three minutes after the platform is able to understand that there is something wrong, whereas previously, it could take hours for our CM to understand and correlate to understand that there was something that was not good happening.
At the moment, I believe that more integration between Cisco Duo Identity Intelligence and the classic Cisco Duo console can be improved, since it is still a separate platform, and when I click on Identity Intelligence, I have to open a new window and log in again.
I have been using Cisco Duo for four years now.
I did not experience any crashes or downtime related to Cisco Duo; there were no issues at all.
The scalability of Cisco Duo in my organization is pretty easy; it is very scalable, and you can start easy and then little by little increase the tuning of the platform in order to achieve a higher level of identity security.
Since I did not have any problems, I did not really use customer service, but I was able to talk with the Cisco Duo product team because we tested the Directory part a little bit earlier than others, and I had a good experience with them.
I have used other solutions before; initially, we were under Microsoft with their multifactor authentication system, but it was lacking some risk context and the risk control that Cisco Duo offers. Two years ago, we compared it with Google's multifactor authentication solution, but again, they were lacking some features that Cisco Duo has.
I had no challenges with Cisco Duo deployment; we simply tested when running a pilot before the final rollout, which was very easy. We leverage a lot of smart working and remote working in our company, so we did not have the opportunity to have everyone at the office for training. Therefore, we pushed everything remotely, and everything worked perfectly.
I can say I have seen a return on investment from having Cisco Duo, as the deployment was not hard to do, saving time for our IT team, and we are able to block a lot of identity risks and issues. Although I have not calculated it, there is definitely a good return on investments.
Regarding the experience of pricing, setup cost, and licensing for Cisco Duo, the setup cost was easy, and the licensing is pretty easy, not with so many levels. For example, the Identity Intelligence feature was a good surprise because it came with our actual licensing, so we didn't have to purchase an additional license. For pricing, we included it inside an enterprise agreement, which allowed us to get a good discount because it was together with other licenses.
We are using Cisco Duo Identity Intelligence as well.
Cisco Duo Identity Intelligence has helped to improve the visibility of the identity risks because it is the platform that allowed us to gain more logs and more telemetry around identity.
I have not noticed any increase in phishing attacks in my organization recently, since last August, when there was a peak in August followed by a new level that was higher than before.
I feel the phishing attacks I am dealing with are maybe not harder but more frequent, and the volume of the phishing messages is raising little by little, while the complexity of the phishing campaigns is growing.
We have implemented the Cisco Duo end-to-end phishing-resistant solution.
For high-risk applications, I use a different level of controls, and we have enabled proximity verification in our organization.
The proximity check in Cisco Duo works fine, and it is easy to use, so my colleagues and employees are not so frustrated by the fact that they have to enter new data or clear a new level of authentication.
We are in the process of rolling out the Directory in the coming months, and we expect to perform a migration in March, so we are close to enrolling and using the Directory pretty soon.
I found that the Identity Intelligence feature was very interesting and an unexpected add-on because at the very beginning, it was not part of Cisco Duo four years ago.
I now have the Identity Intelligence feature, which makes me very happy, and it was indeed the big feature, the big step ahead that we achieved thanks to Cisco Duo.
I would rate this review as a 9.