Cisco ISE Technical Marketing Engineer, Thomas Howard, explains the latest native API-based integration of Duo with ISE 3.3+Patch1 for VPN and TACACS+ user authentication.
Topics:
00:00 Intro and Agenda
00:32 ISE Releases and Patches
01:38 ISE Patches Contain Features
02:30 Zero Trust
03:17 ISE for Zero Trust in the Workplace
04:20 Network Access Authentication Spectrum
07:50 The Need for MFA with VPN
08:44 ISE & Duo Integration with Duo Authentication Proxy
10:00 ISE 3.3.1 with Duo API Integration
11:20 MFA Requires a Finger and Phone
12:09 ISE and Duo are Complementary for Zero-Trust On-Premises and Cloud
12:57 Get a Duo Account @ https://signup.duo.com
14:00 Login to Duo @ https://admin.duosecurity.com
14:10 Demo: Setup Duo Admin API and Auth API for ISE 3.3.1
Note: Requires 🔒Duo Owner/Administrator Account Permission!
15:43 Demo: Configure Duo MFA Integration in ISE with Active Directory
19:22 Demo: VPN Policy Configuration Update and Test with Duo MFA
23:12 Enhanced ISE + Duo Integration for MFA feature roadmap
25:39 The Need for MFA with Device Administration (TACACS+)
28:07 TACACS+ Protocol
29:02 Secure RADIUS & TACACS+ with Native IPsec Tunnels: https://cs.co/ise-ipsec
30:10 ISE Supports TACACS+ and RADIUS
30:58 Demo: Device Administration/TACACS+ Configuration with MFA
36:05 Configure ISE 3.3 Native Multi Factor Auth with Duo
36:28 Device Administration Prescriptive Deployment Guide: https://cs.co/ise-tacacs
36:37 Partners: Cisco dCloud ISE 3.3 Enterprise & Security Demo
38:04 ISE 2.x to 3.x License Migration Offer
Resources
ISE Software & Patch Download: https://cs.co/ise-software
Get a Duo Account @ https://signup.duo.com
Device Administration Prescriptive Deployment Guide: https://cs.co/ise-tacacs
Configure ISE 3.3 Native IPSec to Secure NAD (IOS-XE) Communication:: https://cs.co/ise-ipsec
Cisco dCloud Demos (Cisco Partners & Employees): https://dCloud.cisco.com