Configure Cisco Duo Monitoring App

This article walks through the configuration of the Cisco Duo monitoring app.

Overview

The Cisco Duo Monitoring App is designed to monitor log data for the MSP edition of Cisco Duo. It is designed to operate across all tenants within your Duo dashboard. This means that you will not have to authenticate the app to each customer within the RocketCyber console.

Requirement - To create an API Integration, the following steps can only be performed by a Cisco Duo user with an "Owner Role" permission.

How to Set Up

Login to the RocketCyber SOC console, navigate to integrations and select MFA, then Cisco Duo. The 3 pieces of information needed for this integration are: 

a. Your Duo Integration Key

b. Your Duo Secret Key

c. Your Duo API Hostname

cisco-duo.png

Navigate the following steps
—> Applications
—> Protect An Application 
—> search for “Admin API” 
—> click “Protect” and get the:
    1. integration key
    2. secret key
    3. API hostname 

cisco-duo-rocketcyber.png

Scroll Down and then
—> give the API Integration a name like  “RocketCyber SOC” and then
—> select the “Grant Read Log” and “Grant Read Resource” permissions
grant-duo-settings.png

Scroll down and click SAVE.

The final step is to copy the 3 elements and past them into the RocketCyber SOC console, then authenticate.

Congratulations, Cisco Duo is now configured and the RocketCyber SOC has insight into your MFA/SSO solution.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Contact us