Hello, my name is Haya Elzira, and I'm a cyber security customer success specialist in Cisco. Today, we're going to be talking about a duo overview specifically focusing on the IM capabilities. We will start by highlighting the importance of Cisco duo.00:05And why is it crucially important today to protect your identities? We will then talk about the Duo I M capabilities and what Duo has to offer. Then I'll walk you through how to get started as a duo administrator, and finally.00:25You will have a demo of the dual admin panel as a walkthrough. 80 % of breaches leverage identity as a key component. Threat actors are increasingly leveraging identity based attacks.00:41To gain initial access to a network or protected applications, and these attacks are proving highly effective. Whether using brute force password attacks or social engineering where a user is manipulated into enabling an attacker's access.00:57Identity has become the preferred vector as it's easier to simply log in than to hack in. Data from Cisco Talos confirms this fact. Our incident's response team has found that 80 % of breaches.01:14Stem from identity based attacks. Attackers have learned to take advantage of weaknesses in MFA and identity workflows to gain illicit access into your organizations. We must understand how these attackers exploit identity and most importantly, what.01:31What can we do to prevent it? What makes Duo stand out in identity protection? Here are some key reasons that I'll speak about today. 1st and foremost, stopping identity based attacks Duo is specifically designed to protect against breaches that exploit identity.01:51This includes protecting credentials, devices, and access through advanced strategies. Multi platform identity context. Duo provides full visibility across different identity tools and platforms, giving you a clear picture of potential risks and vulnerabilities.02:11Broad and dynamic coverage with customizable protection policies and risk based approaches, Duo ensures that authentication is both secure and efficient. With risk assessment and dynamic response, Duo constantly monitors risk signals and response in real time.02:31Whether by blocking suspicious access or by escalating security as needed. Beyond the technology, Duo also offers tangible benefits for users and you, the administrators. World class user and administrator experience.02:51Our interface is intuitive, it's easy to use and minimizes friction. Simplified access and trusted scenario, this enhances productivity without compromising security. Dual is easy to implement and easy to manage from day one.03:08Duo adapts to your infrastructure quickly and efficiently. 01:50 9 % return on investment. A Forrester study shows that Duo not only improves security, but also reduces operational costs.03:26Optimizing authentication processes. With Duo, we do not only protect identity, but we do it in a way that boosts productivity and generates value for your organization. Let's dig in by looking at the evolution of duo.03:41Duo is NO longer just MFA. Today, Duo delivers a powerful security layer for identity infrastructure that stops identity based attacks. A brief history lesson. We started with an easy to use, secure, simple MFA, verifying that the user is who they say they are.03:57Or before they are allowed access into your network and business applications. Then we added device verification with posture and trusted endpoints. Verifying that the device is healthy and that it is trusted or managed by your organization.04:16Then we focus on solving the real problem of single sign on. Take it a step further with Duo Passport to deliver the true SSO. Duo Passport can allow the session to be remembered from the 1st.04:35OS log on to the browser web application logins across different browsers and desktop SSO logins, all with one single sign on. After that, we tackle the customer demands for passwordless.04:49We protected the password, but then we removed the password vulnerability altogether to deliver a usable passwordless solution. All along, we never lost focus of the security applications and created risk based authentication.05:06And identity intelligence. With risk based authentication, Duo continuously monitors each and every authentication and dynamically adapts and steps up the verification of the user based on the risk attributes associated with each authentication.05:23What's next? We brought in full directory capabilities to duo, including a directory, powerful and flexible routing rules and ensuring Duo can be a standalone and complete IM solution.05:42Let's look together at the new and enhanced comprehensive cross platform security 1st, workforce identity, security, and IM solution. Duo as an identity provider. We start with the user identity.05:58As Duo being your single source of truth with new capabilities of user directory, customizable user attributes, and continuous support of external directories. Then authenticating the users.06:14Whether with 1st factors and passwords in MFA or with passwordless only experience, focusing on fishing resistant authentication and do passport to protect your employees and contractors and 3rd party users.06:31All this is possible with our zero trust policies, focusing on device trust, device healthy compliance on across different platforms and different applications per multi domain users.06:47Identity automation is a key pillar in our identity provider solution with dynamic routing for external identity sources, with automated provisioning into supported external applications.07:02While maintaining our true single sign on and granular policies. And finally, Duo leverages AI identity analytics and intelligence to provide you with full visibility across different platforms for all your users.07:19With a security posture management solution and threat detection using risk based access control. Now the question is, how can you get started as a dual administrator? How to get started as a dual admin?07:37We will start by simplifying the process for you and five clear and effective steps. Identify application needs. Determine which applications need to be prioritized for protection in order to maximize the impact from the start.07:56Then you enroll your pilot users. Start with a small group of key users to test the implementation and then gather feedback from your users. Next is configuring the applications, integrating them and ensuring that they function properly with the MFA.08:13Next, set clear adaptable policies for access protection based on risk levels. And finally, extend MFA across the entire organization ensuring a smooth and seamless.08:32Rollout. You can protect any application by searching for the name of the integration you have in the dual admin panel. It's important to know that we provide a consistent experience across all your applications, whether they are on the cloud or on premise.08:46If you cannot find the name of your integration, meaning that it hasn't already been published by Duo, you can create a genetic integration. There are thousands, if not millions of applications in the world, and we cannot list every single one of them.09:03Both duo, you can secure access to both on prem and cloud applications quickly and easily. E.g., VPNs like Juniper, Cisco or Palo Alto, cloud applications like Microsoft Office 3605 or Salesforce.09:18On premise and web applications like Unix or Oracle, you can integrate with your Active Directory or ADFS or act as an MFA layer on top of your identity provider such as one login. Now with Duo directory, you could authenticate against our own IDP.09:33When you want to add your users and start your user enrollment, you can either do so manually to Duo by entering the username in the duo admin panel, and that's helpful in the beginning when you are 1st getting started with duo. Most organizations eventually end up syncing their user base into Duo via a director.09:52Resurface such as an on prem active directory or enter ID.10:12Now we also support Oktask and provisioning or google. Duo will receive updates from the directory sync every time the sync runs, which happens twice a day. If a user's email is updated or their security group membership changes, this will be updated in Duo through the sync.10:16Most importantly, if a user is disabled or removed from the synced security groups, they will be disabled or marked for deletion in your dual tenant as well. In order for users to complete your company's MFA requirements, they must be a user in your dual admin panel.10:35Then they must complete enrollment. Enrollment consists of adding an MFA device or a phone number to their dual user. During enrollment, users are prompted to activate their dual mobile application so that they can use it to respond to the dual push requests in the future.10:51This is not a required step, but it is highly recommended. The dual policies have three types. Global, application, and group policies. Duo policies are applied in a stack from bottom to top.11:09Global policy will be applied to all users and all applications. This exists by default and cannot be deleted. Application policies are applied to all users accessing a single application. An application policy overrides.11:26A global policy setting. Group policies apply to all users in a specific group accessing a specific application. Group policies override application and global policy settings for a specific group of users. Duo allows you to define granular policies per application.11:42Or per user group.12:03E.g., you can allow only temporary contractor access to billing applications and restrict access to internal applications. Before we move on to the demo, I wanted to highlight the importance of MFA factors. Duo allows you to leverage phishing resistant MFA like the dual verified push with simple.12:04Unified experience to your users.12:24With proximity push, and of course using biometrics and passwordless authentication, you can customize your dual policies to only allow strong MFA on supported applications and for critical user groups. Now let's go into the dual admin panel for a quick overview.12:26This is the duo admin panel. We start by the main dashboard where you can 1st see announcements from Duo and our dual recommendations. E.g., we are announcing the Duo directory. We are promoting end to end phishing resistance and identity intelligence. You can click on any of these boxes to go through more details.12:46Then you can see an overview of your users and your devices and the authentication methods that have been used in the last seven days. You can also scroll down to see the last ten attempts in your authentication log. On this sidebar here, you can go through your users and see your different users.13:05As your groups, your bypasscodes that you have.13:25Recently activated for your users and also you can configure and view your external directories, whether that's your active directory, your Azure directory or the user attributes that you have added. You can also go through devices and you can see the device insights of out of date operating systems or browsers.13:29What are the operating systems that are mostly used in your organization? Are you using any hardware tokens?13:49You can configure trusted endpoints and do a desktop settings from this tab as well. In device insights, you can either go, you can either go from the menu or from this box right here. You can see more and more statistics about the devices.13:57MFA devices and endpoints that are being used inside your organization. In the policy tab, you can go to policies and configure your global application and user policies and you can also use the policy calculator to check this the the outcome and the impact of each policy that you have.14:12You can determine the user and the application and see what policy is impacting or or what is the impact of this specific policy on the application and user. In applications, you can go to the application catalog where you searched for named.14:33And genetic integrations. You can also check the authentication proxy dashboard to see more information about your authentication proxies. You can also configure your SSO settings, do central and passwordless settings and insights.14:50In reports, we have a list of reports that administrators can leverage to determine the status of different users. The authentication log can show you one 80 days of authentication log for all users, all your applications, and you can filter per app or user group or denied or approved access.15:07Single sign on logs and telephony logs to check on your telephony credits administrator actions and activity log to see the activity of your administrators denied authentication log and deployment progress for when you 1st.15:27Roll out. You can also, under monitoring, if you are in Duo advantage or Premier edition, you can go and access the Cisco identity intelligence for more user visibility and identity.15:42Visibility across your different IDPs and platforms. And then the settings page is where you can see the global settings for your dual admin tenant. You can always see what is an early access program here in terms of settings but also in the main dashboard.15:57You can also go through the branding settings or user communication enrollment, admin role permissions, lockout on fraud settings, SMS passcodes, and logging settings as well. This is an overview of the duo admin panel in order to reach out to dual support.16:13You can click on help, where you can see all the documentation from Duo, the knowledge base articles, community posts, and user guides. You can also reach out to support.16:33By opening a support ticket from here or calling the support number. The support team will need your deployment ID and your account ID which you can get from here. If you need to know what kind of administrator you are, you click on your name and you will see that you are an administrator, a user manager.16:43Application manager and so on.17:03Thank you for watching this dual capsule and stay tuned for what's coming next.17:05
