Cisco ISE Technical Marketing Engineer, Thomas Howard, explains the latest native API-based integration of Duo with ISE 3.3+Patch1 for VPN and TACACS+ user authentication. Topics: 00:00 Intro and Agenda 00:32 ISE Releases and Patches 01:38 ISE Patches Contain Features 02:30 Zero Trust 03:17 ISE for Zero Trust in the Workplace 04:20 Network Access Authentication Spectrum 07:50 The Need for MFA with VPN 08:44 ISE & Duo Integration with Duo Authentication Proxy 10:00 ISE with Duo API Integration 11:20 MFA Requires a Finger and Phone 12:09 ISE and Duo are Complementary for Zero-Trust On-Premises and Cloud 12:57 Get a Duo Account @ 14:00 Login to Duo @ 14:10 Demo: Setup Duo Admin API and Auth API for ISE Note: Requires 🔒Duo Owner/Administrator Account Permission! 15:43 Demo: Configure Duo MFA Integration in ISE with Active Directory 19:22 Demo: VPN Policy Configuration Update and Test with Duo MFA 23:12 Enhanced ISE + Duo Integration for MFA feature roadmap 25:39 The Need for MFA with Device Administration (TACACS+) 28:07 TACACS+ Protocol 29:02 Secure RADIUS & TACACS+ with Native IPsec Tunnels: 30:10 ISE Supports TACACS+ and RADIUS 30:58 Demo: Device Administration/TACACS+ Configuration with MFA 36:05 Configure ISE 3.3 Native Multi Factor Auth with Duo 36:28 Device Administration Prescriptive Deployment Guide: 36:37 Partners: Cisco dCloud ISE 3.3 Enterprise & Security Demo 38:04 ISE 2.x to 3.x License Migration Offer Resources - ISE Software & Patch Download: - Get a Duo Account @ - Device Administration Prescriptive Deployment Guide: - Configure ISE 3.3 Native IPSec to Secure NAD (IOS-XE) Communication:: - Cisco dCloud Demos (Cisco Partners & Employees):