How Duo Push works
When a user logs in, Duo sends a notification to the Duo Mobile app on their phone showing the application and location. They approve or deny with a tap.
Verified Duo Push
Attackers try push bombing: sending repeated prompts until a tired user approves one. Verified push asks the user to type a code shown on the login screen into the app, proving they are the person logging in. Our social engineering training teaches staff never to approve prompts they did not start.
Best practice
- Use verified push for higher-risk apps and users
- Report unexpected prompts through Duo's fraud reporting
- Combine with device trust policies
How Forever Systems supplies and supports Cisco Duo
We supply and support Cisco Duo for UK organisations, from small teams to multi-site businesses.
- Edition selection: Essentials, Advantage or Premier, matched to your requirements
- Integration: Microsoft 365 and Entra ID, VPNs and firewalls, Windows logon, RDP, on-premises apps and SSO
- Roll-out: user enrolment, communications and help desk processes that stop MFA fatigue
- Ongoing support: policy tuning, reporting, renewals and licence changes
Forever Systems Ltd is an independent IT and cyber security provider and also supplies the wider Cisco Secure portfolio.
Want a Cisco Duo quote or trial?
Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.
Call 0333 358 3808Send an enquiryFrequently asked questions
What if a user gets a Duo Push they did not request?
They should deny it and report it. Their password may be compromised and should be reset.
Does Duo Push need mobile data?
Push needs connectivity. Users can fall back to passcodes generated in Duo Mobile when offline.