Duo Security

About Duo Security

Duo Security is a cloud-based solution for user identity verification and device vulnerability assessment which offers multiple methods of two-factor authentication, configurable permissions and controls, endpoint visibility and remediation, Single Sign-On (SSO), and more. The Duo Trusted Access platform is designed to address possible security threats by verifying users’ identities and device health before they are allowed to connect to the organization’s applications.

Duo verifies users’ identities in a number of ways, using two-factor authentication methods including SMS passcodes, phone callbacks, hardware tokens, and one-tap authentication through push notifications from the Duo Mobile app. Administrators can configure and enforce custom access policies and controls, including blocking user logins from specific locations, such as countries the company does not do business in. Application-based controls can also be set up, allowing administrators to define different two-factor authentication requirements for access to specific systems, such as requiring two-factor authentication for every VPN login attempt, but only once a week for Outlook access.

Duo allows users to create an inventory of user devices and use this data to identify vulnerabilities posed by outdated operating systems, browsers, and Flash & Java plugins. Users can be automatically notified of outdated devices, with direct links to update to the latest software version, provided a set number of login attempts before application access is blocked, or immediately blocked from accessing applications, with permissions reinstated after the browser or plugin has been updated. For organizations where certain applications have specific browser or Flash dependencies, self-remediation policies can be set up to notify only particular users of issues with specific plugins or browsers.

Duo’s Access Gateway offers a secure web portal to give Single Sign-On (SSO) access to employees who use 10 or more cloud applications. Applications are presented on a single page, giving users visibility into all available applications. Device security health checks are carried out every time a user accesses a cloud application, and user identity is verified without the need for them to re-authenticate each time they access an application.