Duo Security MFA

Why Duo Security

Duo is the #1 MFA platform with push, hardware tokens, WebAuthn, and risk-based authentication. It protects VPN, RDP, M365, AWS, and 1000+ apps — with adaptive policies and endpoint visibility.

• Duo Push: One-tap approval via mobile app (no SMS codes).
• Adaptive MFA: Step-up auth based on location, device, network.
• Device Health: Blocks outdated OS, missing AV, no disk encryption.
• Zero Trust: Integrates with Cisco, Palo Alto, Zscaler, Cloudflare.

How Blackhawk MSP Deploys It

• Enable Duo in Pax8; protect M365, VPN, RDP, and admin portals.
• Enroll users via self-service portal with QR code and backup codes.
• Set policy: block login if device not trusted or OS out of date.
• Enable “Remember Device” for 30 days on managed endpoints.
• Review monthly MFA bypass and failed login reports.

FAQ

Q: Is SMS secure?
A: Duo discourages SMS — push, hardware, or WebAuthn preferred.

Q: What if phone is lost?
A: Users self-recover via backup codes or help desk reset.

Q: Does it work offline?
A: Yes — hardware tokens (YubiKey) and offline access mode.

Q: Is it HIPAA/GDPR compliant?
A: Yes — SOC 2, ISO 27001, data residency options.

Need help? Call 1-925-218-4000 — Blackhawk MSP