MFA / 2FA with Cisco Duo to protect Network Devices, VPN, Windows OS, Hypervisors
IT Pattana provides MFA (Multi Factor Authentication) / 2FA (Two Factor Authentication) for clients.
Cisco Duo is the most accepted MFA solution which can protect most of your Servers, Hypervisors, Network Devices, Client VPN (both Windows IPsec client VPN and SSL client VPN).
Duo Essential edition offers MFA, SSO (Single Sign On), Duo Authentication Proxy features.
Duo Advantage edition adds up to the Essentials with device heath check (Trusted Endpoints), Risk -based authentication features.
Duo Premier edition adds up to the Advantage with Duo Network Gateway (DNG) to protect Legacy Web Servers that do not support native MFA
https://youtu.be/UdEVyiasIlo
DuoAuthProxy protects Telnet / SSH to Network Switch and devices that support RADIUS authentication. Classic Network Switch such as Cisco, Aruba, Fortinet allow Telnet / SSH to manage and configure. By default these Network devices do not support MFA / 2FA. We can use Cisco Duo to protect them.
https://youtu.be/UFi3A5o0n4Y
DuoAuthProxy protects Cisco Secure Connect SSL Client VPN (AnyConnect). For users remotely to use company resources with simple username and password, this can introduce public risk because anyone can try brute force the username and password. Cisco Duo 2FA protects by adding additional security factor with iPhone or Android smart phones.
https://youtu.be/S5k1cRKkwKg
Windows Server and Win10/11 logon can be protected by Cisco Duo Windows RDP agent. Cisco Duo can protect either Windows installed on a physical machine, on VM, and also protect Remote Desktop session to the Windows.