Why Cisco Duo 2FA is a sensible step for your business

Why a strong password is only the starting point

Passwords can be exposed through phishing, reused on another compromised service or stolen from a device. An attacker who obtains one may try it against email, remote access and business applications.

Two factor authentication, usually called 2FA, asks for two different kinds of evidence. A password and an approved authentication device are a familiar example. MFA means multifactor authentication and is the broader term for using more than one factor.

Where Duo can help

Duo offers integrations for cloud applications, supported remote access systems and Windows logins. Each integration must be configured; installing Duo Mobile on a phone alone does not protect your company systems.

Depending on the application and policy, users can authenticate with Duo Push, Verified Duo Push, passkeys or security keys. We select suitable methods for the people and systems involved, including staff who cannot use a personal smartphone.

Protect the accounts that matter most

Start by understanding which accounts could cause the most damage if compromised. Then build coverage across ordinary staff accounts as well as privileged access.

• Email and cloud accounts that hold customer information and reset links.
• Remote access used by staff working away from the office.
• Administrator accounts that can change settings or access company data.
• Supported business applications used for important daily work.

Choose stronger methods and teach staff what to expect

Verified Duo Push asks the user to enter a code shown during the login, helping reduce accidental approvals. Passkeys and security keys can provide phishing resistant authentication where supported. Ordinary push approval should not be described as phishing proof.

Staff should reject and report a request they did not initiate. MFA also needs to sit alongside device protection, patching and access reviews: it cannot prevent every attack, including every misuse of an already stolen session.

Already using Microsoft MFA?

We review what you already have before recommending a change. Microsoft’s own MFA may already meet some needs. Duo can be useful where a business wants a consistent approach across several supported systems, with central administration and local implementation support.

Talk to your local Duo partner

If you would like to move to Duo, improve an existing rollout or find out which systems can be protected, contact Bury I.T. Support Ltd. We will explain the licensing, assess compatibility and plan the move around your business. Call 0161 884 3303 or use our contact page.