Cisco Duo Integration

Zero trust is the future of information security - and Cisco Duo is your rock-solid foundation. Cisco Duo secures your workforce, taking access security beyond the corporate network perimeter to protect your data at every authentication attempt, from any device, anywhere. Confirm user identities in a snap, monitor the health of managed and unmanaged devices, set adaptive security policies tailored for your business, secure remote access without a device agent, and provide secure, user-friendly single sign-on, quickly and easily with Cisco Duo.

With this integration, your Cisco Duo device information will appear alongside insights from your other security products.

Note: User data from Cisco Duo has migrated to Identity Intelligence via Security Cloud Control. See Cisco Identity Intelligence for more information.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Cisco tab and navigate to the Cisco Duo integration.

  3. Click Get Started. The Cisco Duo integration page is displayed.

  4. Expand the Integration Guide area and follow the instructions on how to add the Cisco Duo integration in Cisco XDR.

You can perform the following tasks after you integrate Cisco Duo with Cisco XDR:

  • Assets - View devices as reported by Cisco Duo. For more information, including on how to filter the view to only the reports from Cisco Duo, see Devices.

  • Pivot Menu - Install specific workflows from the Automation Exchange to use the Pivot menu to access actions in Cisco Duo. Available actions include adding a user to a group in Cisco Duo.

  • Automation:

    • Atomic Actions - The atomic actions for Cisco Duo can be used as building blocks in custom workflows. These can be found as available Actions in the left menu of the Workflow Editor. See Atomic Actions and Workflows.

    • Workflows - The workflows for Cisco Duo can be installed from the Automation Exchange. See Workflows and Exchange.

    • Target - The Cisco Duo target is automatically created for out-of-box and custom workflows. See Targets Created From Integrations.