As part of Cisco’s commitment to securing access for the network perimeter, late last year it added Duo Security to the Cisco family. Duo is a leading provider of unified access security and multi-factor authentication delivered through the cloud.
Together Duo-Cisco make it easier for customers to deploy zero trust security measures both inside and outside the corporate network. Even better, it integrates with Cisco networking products and platforms that you already know and love, to bring strong user and device verification and mutual exchange of security context.
What This Means for You!
We all know that network security is getting harder, especially as people jump on and off the network – at work, at a branch office, at home, and on-the-go. Perhaps the single biggest vulnerability to these networks is stolen credentials. The 2018 Verizon Data Breach Report found that the use of stolen credentials or hacking is still the top action in data breaches.
“To reduce organizations’ vulnerability to these types of attacks requires a different approach—one in which we protect an individual’s identity. In order to do so, we must rethink security to include a zero trust model that is identity-centric,” writes Dr. Gee Rittenhouse, senior vice president and general manager at Cisco’s security business group.
This is where Duo comes in.
Duo’s solution verifies the identity of users and the health of their devices before granting them access to applications – helping prevent cybersecurity breaches without the friction and cost of legacy credential protection solutions.
Whether your applications are on-premises or in the cloud, Duo’s zero trust model enables secure connections by verifying the trust of the user and device at the time of access. This prevents lateral movement by would-be threat actors across the network and provides the same level of protection to all applications.
Integration with Existing Cisco Products
As part of the acquisition, the two companies have also been pursuing integration opportunities between their portfolios to drive an even greater security posture.
Integration of Cisco’s network, device and cloud security platforms with Duo’s zero trust authentication and access products will help enable Cisco customers to easily and securely connect users to any application on any networked device.
Today, Duo integrates with several products including Cisco ASA VPN to give security admins the ability to enforce a consistent user and device-based access policy for VPN access – reducing the risk for data breaches and streamlining compliance.
It also hooks up with Cisco Umbrella (previously OpenDNS). Umbrella is a cloud security platform that provides security at the DNS layer. Duo injects strong user authentication, device security hygiene check and visibility, preventing any potential compromise to Umbrella.
Another firm favorite – Cisco WebEx – integrates with Duo as well, so that you can secure even your most sensitive meetings and content. Duo adds two-factor authentication and flexible security policies to WebEx SSO logins using existing on-premises or cloud-based directory credentials before permitting access to the platform.
Learn more about the integrated products or contact Clearpath’s Cisco Professional Services Team.