Duo Trusted Endpoints - Bite-Sized Video

Hi, I'm Mariah Williskki, customer success specialist here at Cisco. Today I'm gonna give you a brief overview of Duo trusted endpoints. A powerful feature that enhances your organization's security by ensuring only trusted devices can access your applications.00:00Duo trusted Endpoints offers many benefits to ensure zero trust access to SSO applications such as blocking attackers by preventing access from unknown or untrusted devices by helping meet data security regulations by enforcing device trust policies.00:20Through supporting bring your own device and 3rd party devices without requiring full device management software, and through integrating with Cisco secure Endpoint to help prevent access from potentially compromised devices from accessing resources.00:39And Duo trusted endpoints can be deployed in several ways depending on your environment and management tools. The management tool integrations, Duo supports integrations with many enterprise device management solutions. You could do it through pilot group testing. You can enable trusted endpoints.00:56Thanks for a pilot group.01:16By creating a group in duo, applying custom policies that require trusted devices and activating the configuration for that group. This is gonna allow for gradual rollout and testing. Through manual device cache upload, for environments without direct management integration, you could upload device ID.01:17Identifiers via scripts or CSV files using Duo's device API to create and maintain a trusted device cache.01:37And through agentless browser based trust. Duo also supports agentless enforcement for Chrome Enterprise and Microsoft Edge for agentless trust relying on browser management policies and not full device management.01:46Now let's jump into showcasing Duo trusted endpoints using Duo desktop. You're gonna 1st log into the Duo admin panel and navigate to devices and then trusted endpoints. If this is your 1st management integration, click the get started button at the bottom of the trusted.02:02The endpoints intro page. If you're adding another management in integration, click the add integration button you see at the top of the page instead.02:21On the add trusted endpoint integrations page, locate Active Directory domain services and the list of integrations. Then you'll choose Windows from the select operating system dropdown, and then click the add button.02:31To log into a domain controller or other Windows system with the RSA T package installed, 1st launch PowerShell and paste in the commandlet string provided on your trusted endpoints integration. Once you are provided with the domain SID, simply take that info and paste the string into the trusted endpoint.02:47From the Duo admin panel navigate to policies and create a new policy. This is gonna allow us to attach the policy to an application as a group policy for testing purposes. Find the duo desktop section, select add, and then set the option for Windows OS to require.03:10Higher duo desktop. Then we're gonna select the trusted endpoint section, select add, and enforce trusted endpoints by selecting block endpoints that are not trusted. This will prevent access unless duo desktop confirms device trust.03:30This policy can now be added to an application or the Duo central portal to test trusted endpoints with Duo desktop using a pilot group to do so. In summary, Duo trusted Endpoints provides flexible, reliable device trust enforcement to secure access to you.03:48Your applications, whether through management integrations, manual device cache uploads or duo desktop verification. This is helping protect your organization by ensuring only trusted devices gain access, supporting BYOD strategies and mitigating risk from compromis.04:07Or unknown devices. Thank you for watching.04:28