Deploy, Configure & Manage Cisco Duo (Duo)
In this 3-day course, you will learn to deploy, configure, and manage Cisco Duo. In the present scenario, the workforce of any company can connect from anywhere and everywhere using any device. So, companies must ensure that all the company assets are protected. Cisco Duo fits into a zero-trust security model assuring proper authentication of users and devices and continuously monitors each access attempt, ensuring that all the user's accounts, devices, and applications are protected from unauthorized access company-wide.
Check out our full list of training locations and learning formats. Please note that the location you choose may be an Established HD-ILT location with a virtual live instructor.
Train face-to-face with the live instructor.
Access to on-demand training content anytime, anywhere.
Attend the live class from the comfort of your home or office.
Interact with a live, remote instructor from a specialized, HD-equipped classroom near you. An SLI sales rep will confirm location availability prior to registration confirmation.
All Sunset Learning dates are guaranteed to run!
Register
Prerequisites:
Before taking this course, it would be good to have exposure to the following:
- Network Fundamentals
- Network Security Fundamentals
- Endpoint Agents
Target Audience:
- Network Administrators
- Network Engineers
- Sales Engineers
- System Engineers
- Anyone who wants to learn about Multi-Factor Authentication (MFA)
Course Objectives:
After completing this course, students will be able to:
- Describe the different authentication methods
- Perform endpoint and user enrolment
- Work with the Duo admin portal
- Protect applications
- Describe and perform directory synchronization
- Describe and configure Duo SSO
- Describe Duo access gateway and Duo access features
- Describe and implement trusted endpoints
- Describe and perform various management functions
- Explain various Duo use cases
Course Outline:
Fundamentals of Authentication Methods
- What is Authentication?
- Different authentication methods
- Two-factor (2FA) authentication and beyond (MFA)
- Why do you need 2FA?
- 2FA/ MFA using Cisco Duo
Getting started with Duo MFA
- Overview of Duo Security
- Different Licensing Models (MFA, Access and Beyond)
- Authenticating (Duo Prompt, Duo Universal Prompt, Duo Central)
- Endpoint and User Enrolment
Duo Administration Overview
- Accessing Duo Admin Portal
- Administrator and Users Account Setup
- Dashboard and Navigation
- Viewing Information and Reports
Enrolling Users
- Automatic
- Self-Enrolment
- Manual Enrolment
- Activating Duo Mobile
Protecting Applications
- Application Options
- New and Existing Applications
- Application Updates
- Universal Prompt Activation
- View your applications
- Remove an application
Duo Directory Sync
- Overview of Directory Sync
- Azure AD Synchronization
- Active Directory Synchronization
- OpenLDAP Synchronization
Duo SSO/ SAML
- Duo SSO/ SAML overview
- Prerequisites
- Enabling Duo SSO
- Configuring the Authentication Source
- Creating a Cloud Application
- Duo Central
Duo Access Gateway (DAG)
- DAG Overview
- DAG for Windows
- DAG for Linux
- DAG and Universal Prompt
Duo Access Features
- Access Overview
- Policy and Control
- Device Insight
- Endpoints Insight
- Health monitoring
- Trust monitoring
Duo Beyond Features
- Trusted Endpoints
- Duo Network Gateway
Trusted Endpoints
- Overview of Trusted Endpoints
- Device Health Verification
- Duo Mobile Verification
- Certificate Verification
- Best Practices – Implementing Trusted Endpoints
- Applying the Trusted Endpoints Policy
- Monitoring Trusted Endpoints
- Controlling Application Access for Trusted Endpoints
Operations and Management
- Changing Settings
- End user and Admin Management
- Device Management
- Using groups
- Usability enhancements
- Software Downloads and Updates
Remote Access & VPN Use-Cases
- Duo Network Gateway
- Cisco AnyConnect VPN with ASA or Cisco Secure Firewall
- Duo 2FA for Meraki Client VPN
Common Use Cases
- Duo Single Sign-On
- Microsoft RDP
- Web Applications
- Identity Providers (Cisco Identity Services Engine)