Duo for AnyConnect VPN

Duo's multi-factor authentication (MFA) is the easiest MFA solution to protect your Cisco AnyConnect VPN. Verify user identities with our strong authentication options to defend against compromised credentials and secure VPN access for any user, anywhere.

Get the guide to Securing Remote Access

Duo integrates seamlessly with Cisco's AnyConnect VPN, providing an additional layer of security for your remote access strategy. When users attempt to login to your VPN, Duo's MFA checks the device's security health and verifies the user’s identity before they access your applications.

Webinar: Learn How Duo Can Secure Your Cisco AnyConnect VPN

Besides, many on-premises users were used to Cisco AnyConnect’s VPN, so the addition of Duo was easy for them to adopt. Additionally, Duo is a cloud service, so we didn’t need to purchase any new hardware to get it up and running. It met our needs in terms of delivery schedule and maintenance costs as well.

Yusuke Suzuki

Assistant Manager, DX Promotion Department, Mainichi Broadcasting System (MBS)

Easy

Protect your Cisco AnyConnect VPN logins with Duo’s MFA solution. Duo offers the easiest to use, fastest to deploy, most flexible MFA solution. Verify user identities in seconds with several simple authentication options, including Duo Push, one-time passcode (OTP), SMS, phone call , or security keys.

Effective

Provide secure remote access to internal applications; defend against stolen user credentials; and discover which devices are logging into your AnyConnect VPN. Get visibility and insight into devices and their security posture to check for device health and enforce policies to ensure VPN access from only trusted, secure devices.

Effortless

Set up Duo for Cisco AnyConnect in less than 30 minutes. Duo provides several easy ways to integrate Duo with AnyConnect.

Documentation: Duo RADIUS Two-Factor Authentication for Cisco ASA SSL VPNs
Documentation: Duo Two-Factor Authentication with LDAPS for Cisco ASA SSL VPN with Browser and Secure Client
Documentation: Duo Solutions for Cisco AnyConnect or Cisco Secure Client VPN with ASA or Firepower

Economical

Reduce help desk and administrative burden inherent with legacy token-based solutions to shrink total cost of ownership with powerful self-service and self-enrollment capabilities and lower administrative overhead.

Frequently Asked Questions

What are Duo AnyConnect requirements?

To configure Duo for Cisco AnyConnect, you will need these prerequisites: • Basic Cisco Firewall and AnyConnect VPN knowledge • Basic knowledge of ISE Authentication and Authorization flows • Basic AAA protocols knowledge (RADIUS, SAML, or LDAP) See documentation for specific requirements based on your chosen Duo Cisco AnyConnect integration method, whether it’s through RADIUS, SAML, or LDAP.
How to configure Duo for Cisco AnyConnect?
Duo integrates with your Cisco ASA or Firepower VPN to add multi-factor authentication to AnyConnect logins. Configure Duo MFA for Cisco AnyConnect VPN with one of a variety of methods. See documentation on these setups:
- RADIUS configuration: Direct integration using RADIUS protocol for 2FA for VPN access
- SAML Single Sign-On (SSO): Offers an interactive Duo Universal Prompt, ideal for cloud-hosted identity providers
- LDAP configuration: Directly connects ASA devices to Duo's cloud service using LDAP, adding Duo MFA during the login process

Ready to secure your organization?

Experience for yourself why Duo is one of the most trusted access management tools. Try it for free, explore editions, and connect with security experts.

Start your free trial

See why Duo is the leader in identity security.

Compare editions

Find out which edition is right for your organization.

Contact sales

Connect with our sales team and learn more.