Skip to content
Cisco Duo logo

Cisco Duo

TI y Seguridad · duo.com

¿Es tu herramienta? Reclama esta ficha →

Resumen

Cisco Duo is a cloud-delivered identity security service that adds multi-factor authentication, single sign-on and device-trust checks in front of business applications, VPNs and remote desktops. It authenticates users through the Duo Mobile app, passkeys, security keys or phone-based methods, and can block access from endpoints that fail posture or management checks. Duo publishes a four-step Free/Essentials/Advantage/Premier edition ladder and integrates with hundreds of documented applications and network devices.

El problema que resuelve Cisco Duo

Most breaches start with a valid but stolen credential, and the applications a company needs to protect are split across modern SaaS and older infrastructure like VPN concentrators, RDP and Windows logon that a cloud identity provider alone does not cover. Duo puts a single MFA and policy layer in front of both, and can additionally require that the device itself is known, managed or passing posture checks before access is granted. Its published integration catalogue spans network gear from Cisco, Palo Alto Networks, Fortinet, F5 and Ivanti alongside SaaS such as Microsoft 365, Google Workspace, Salesforce and Slack.

Contexto para decidir

Usa estos puntos para comprobar si el producto encaja con tu operación, no solo con la lista de funciones.

  • Precio de entrada publicado: Free. Confirma límites de usuarios, uso y funciones por plan.
  • Despliegue: cloud. Comprueba requisitos de seguridad, residencia de datos y acceso para todos los equipos que lo utilizarán.
  • Integraciones verificadas: Microsoft Entra ID, Microsoft 365, Active Directory Federation Services, Microsoft Intune, Okta, PingFederate. Valida el sentido de sincronización y los límites del plan elegido.
  • La ficha se comprobó por última vez el 31/7/2026; los precios y las funciones pueden cambiar.

Cómo evaluar Cisco Duo

Una ficha ayuda a crear una lista corta; una prueba con el flujo real del equipo decide si la herramienta encaja. Usa esta lectura junto con los datos estructurados y confirma cualquier cambio con el proveedor.

Encaje de flujo

El registro la considera especialmente adecuada para IT teams that need to put MFA in front of a VPN, RDP or Windows logon quickly, Small businesses under ten users who want real MFA at no cost, Organizations enforcing device-trust and posture rules before granting app access. Comprueba que ese contexto coincide con el volumen, los roles y los procesos que debe soportar tu equipo.

Preguntas del piloto

  • ¿Puede Cisco Duo completar el flujo crítico sin trabajo manual fuera de la herramienta?
  • ¿Las conexiones registradas (Microsoft Entra ID, Microsoft 365, Active Directory Federation Services, Microsoft Intune) cubren el sentido de sincronización, los permisos y el volumen que necesitamos?
  • ¿Qué límites de usuarios, uso, almacenamiento, soporte o seguridad aparecen después del precio inicial?

Evidencia y vigencia

Esta ficha se comprobó el 31/7/2026. La fecha indica cuándo se revisó el registro, no una garantía de que el proveedor no haya cambiado sus condiciones después.

Ideal para

  • IT teams that need to put MFA in front of a VPN, RDP or Windows logon quickly
  • Small businesses under ten users who want real MFA at no cost
  • Organizations enforcing device-trust and posture rules before granting app access

No encaja si

  • Teams wanting a full customer identity (CIAM) platform for external end users
  • Buyers who need built-in privileged credential vaulting and session recording

Por qué está listada

  • Publishes transparent per-seat list pricing across four editions plus a genuinely usable free tier for teams of ten or fewer, which is rare in enterprise identity security.
  • Documented integrations span both SaaS apps and network infrastructure (VPN concentrators, RDP, Windows logon), so it covers legacy access paths that pure cloud IdPs often do not.
  • Backed by Cisco with FedRAMP Moderate authorized federal editions, making it viable for regulated and public-sector buyers as well as SMBs.

Precios

Duo Free

Free

Best for small businesses with 10 or fewer users.

  • Up to 10 users
  • Strong multi-factor authentication
  • Seamless application integrations
  • Free Duo Mobile authenticator app

Duo Essentials

$3 per user / month

Best for simple security management and seamless authentication.

  • Duo Directory
  • Phishing-resistant MFA
  • Complete passwordless authentication
  • Single sign-on
  • Trusted Endpoints
  • Unlimited applications

Duo Advantage

$6 per user / month

Best for dynamic threat detection, oversight, and authentication.

  • Everything in Duo Essentials
  • Cisco Identity Intelligence (cross-identity visibility, ISPM and ITDR)
  • Duo Passport
  • Session theft protection
  • Active Directory Defense
  • Risk-Based Authentication

Duo Premier

$9 per user / month

Best for comprehensive identity security with complete device trust.

  • Everything in Duo Advantage
  • Comprehensive Zero Trust access package
  • VPN-less remote access to private resources
  • Complete device trust with endpoint protection check

Funciones

Audit logsAuthentication, administrator action and telephony logs are retrievable in the Admin Panel and via the Admin API for SIEM export.
Compliance reportingBuilt-in reports (authentication, device insight, policy impact) plus log export support audit evidence, but there are no packaged framework-specific compliance reports.
Device managementDuo does device trust and posture checking via Duo Desktop and Trusted Endpoints and reads management state from Intune, Jamf Pro, Workspace ONE and others; it is not an MDM itself.
Multi-factor authenticationCore product: push, passcodes, phone call, hardware tokens, passkeys and phishing-resistant methods; available in every edition including Free.
Privileged access managementNo credential vaulting or session recording; Duo layers MFA and SSO onto third-party PAM tools such as CyberArk Privileged Access.
Public APIAdmin API and Auth API cover users, phones, tokens, admins, integrations and log retrieval; included with Essentials, Advantage and Premier.
Role-based access controlNine standard admin roles (Owner, Administrator, User Manager, Help Desk, Security Analyst, Application Manager, Billing, Read-only, Account Switcher) plus custom roles on paid editions; Free plan admins are all Owners.
SCIM / directory provisioningInbound SCIM 2.0 from Okta or any SCIM-compliant directory; Entra ID users are imported via Duo Directory Sync rather than SCIM.
Self-hosting / on-premCloud-only SaaS. The on-premises Duo Authentication Proxy is only a connector to on-prem directories and appliances, not a self-hosted deployment of the service.
SSO / SAMLDuo SSO supports SAML 2.0 and OIDC with hundreds of prebuilt app integrations; requires Essentials or above.

Integraciones

Microsoft Entra IDMicrosoft 365Active Directory Federation ServicesMicrosoft IntuneOktaPingFederateOneLoginGoogle WorkspaceCisco ASACisco MerakiPalo Alto NetworksFortinet FortiGateF5 BIG-IPIvanti Connect SecureJamf ProVMware Workspace ONESalesforceServiceNowSlackDropboxAtlassian CloudCyberArk Privileged AccessSplunkGitHub Enterprise

Seguridad y cumplimiento

SOC 2ISO 27001PCI DSSNIST 800FedRAMP Moderate (Duo Federal editions)FIPS 140-2 (Duo Federal editions)

Pros y contras

Pros

  • Deployment and day-to-day administration are repeatedly described as fast and low-friction, with a straightforward admin portal.
  • Broad, well-documented integration coverage across VPNs, Windows/RDP, cloud IdPs and hundreds of SaaS applications.
  • The Duo Mobile push experience is easy enough that non-technical staff and executives need little training.
  • Multiple authentication method fallbacks (push, passcode, phone call, hardware token, passkeys) keep users unblocked.

Contras

  • Heavy dependence on the user's phone: a lost, dead or forgotten device turns into a help-desk event.
  • Push notifications are reported to occasionally lag or fail to arrive, delaying logins.
  • Cost draws complaints on larger deployments, and buyers note competitors price basic MFA lower.
  • Deeper reporting and analytics are gated behind the higher Advantage and Premier editions rather than the entry paid tier.

Qué muestra el registro

4.7/5
548 reviews agregadasÚltima comprobación 2026-07-31

Capterra shows 4.7 out of 5 across 548 reviews, the largest public review base of the three major platforms, while G2 lists 4.5 out of 5 from 495 reviews and TrustRadius carries 401 reviews with a Top Rated designation. Reviewers across all three consistently praise fast rollout and an easy end-user push experience, and consistently raise mobile-device dependency, occasional push delays and cost at scale.

Resumen y puntuación agregados de plataformas públicas de reseñas. Enlazamos a las reseñas originales en lugar de reproducirlas — lee la fuente antes de decidir.

Reseñas de usuarios

Escritas por cuentas de Audyense · moderadas antes de publicarse

Todavía no hay reseñas de usuarios.

¿Has usado Cisco Duo? Sé el primero en contarles a otros compradores qué funcionó de verdad.