ISE & Duo Enhanced Integration for MFA

Cisco ISE Technical Marketing Engineer, Thomas Howard, explains the latest native API-based integration of Duo with ISE 3.3+Patch1 for VPN and TACACS+ user authentication. Topics: 00:00 Intro and Agenda 00:32 ISE Releases and Patches 01:38 ISE Patches Contain Features 02:30 Zero Trust 03:17 ISE for Zero Trust in the Workplace 04:20 Network Access Authentication Spectrum 07:50 The Need for MFA with VPN 08:44 ISE & Duo Integration with Duo Authentication Proxy 10:00 ISE 3.3.1 with Duo API Integration 11:20 MFA Requires a Finger and Phone 12:09 ISE and Duo are Complementary for Zero-Trust On-Premises and Cloud 12:57 Get a Duo Account @ https://signup.duo.com 14:00 Login to Duo @ https://admin.duosecurity.com 14:10 Demo: Setup Duo Admin API and Auth API for ISE 3.3.1 Note: Requires 🔒Duo Owner/Administrator Account Permission! 15:43 Demo: Configure Duo MFA Integration in ISE with Active Directory 19:22 Demo: VPN Policy Configuration Update and Test with Duo MFA 23:12 Enhanced ISE + Duo Integration for MFA feature roadmap 25:39 The Need for MFA with Device Administration (TACACS+) 28:07 TACACS+ Protocol 29:02 Secure RADIUS & TACACS+ with Native IPsec Tunnels: https://cs.co/ise-ipsec 30:10 ISE Supports TACACS+ and RADIUS 30:58 Demo: Device Administration/TACACS+ Configuration with MFA 36:05 Configure ISE 3.3 Native Multi Factor Auth with Duo 36:28 Device Administration Prescriptive Deployment Guide: https://cs.co/ise-tacacs 36:37 Partners: Cisco dCloud ISE 3.3 Enterprise & Security Demo 38:04 ISE 2.x to 3.x License Migration Offer Resources - ISE Software & Patch Download: https://cs.co/ise-software - Get a Duo Account @ https://signup.duo.com - Device Administration Prescriptive Deployment Guide: https://cs.co/ise-tacacs - Configure ISE 3.3 Native IPSec to Secure NAD (IOS-XE) Communication:: https://cs.co/ise-ipsec - Cisco dCloud Demos (Cisco Partners & Employees): https://dCloud.cisco.com