Cisco Duo Integration

Zero trust is the future of information security - and Cisco Duo is your rock-solid foundation. Cisco Duo secures your workforce, taking access security beyond the corporate network perimeter to protect your data at every authentication attempt, from any device, anywhere. Confirm user identities in a snap, monitor the health of managed and unmanaged devices, set adaptive security policies tailored for your business, secure remote access without a device agent, and provide secure, user-friendly single sign-on, quickly and easily with Cisco Duo.

With this integration, your Cisco Duo user and device information will appear alongside insights from your other security products. See how many users you've enrolled and applications you've protected, as well as your administrator count - with even deeper integration and configuration options to come.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Cisco tab and navigate to the Cisco Duo integration.

  3. Click Get Started. The Cisco Duo integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Cisco Duo integration in Cisco XDR.

You can perform the following tasks after you integrate Cisco Duo with Cisco XDR:

  • Assets - View devices as reported by Cisco Duo. For more information, including on how to filter the view to only the reports from Cisco Duo, see Devices.

  • Automation:

    • Atomic Actions - The atomic actions for Cisco Duo can be used as building blocks in custom workflows. These can be found as available Actions in the left menu of the Workflow Editor. See Atomic Actions and Workflows.

    • Target - The Cisco Duo target is automatically created for out-of-box and custom workflows. See Targets Created From Integrations.