Configure Cisco Duo Monitoring App

This article walks through the configuration of the Cisco Duo monitoring app.

NOTE: This app is currently in private beta and is not generally available for all customers.

Overview

The Cisco Duo Monitoring App is designed to monitor log data for the MSP edition of Cisco Duo. It is designed to operate across all tenants within your Duo dashboard. This means that you will not have to authenticate the app to each customer within the RocketCyber console.

Requirement - To create an API Integration, the following steps can only be performed by a Cisco Duo user with an "Owner Role" permission.

How to Set Up

Login to the RocketCyber SOC console, navigate to integrations and select MFA, then Cisco Duo. The 3 pieces of information needed for this integration are:

a. Your Duo Integration Key

b. Your Duo Secret Key

c. Your Duo API Hostname

Navigate the following steps

—> Applications

—> Protect An Application

—> search for “Admin API”

—> click “Protect” and get the:

1. integration key
2. secret key
3. API hostname

Scroll Down and then

—> give the API Integration a name like “RocketCyber SOC” and then

—> select the “Grant Read Log” and “Grant Read Resource” permissions

Scroll down and click SAVE.

The final step is to copy the 3 elements and past them into the RocketCyber SOC console, then authenticate.

Congratulations, Cisco Duo is now configured and the RocketCyber SOC has insight into your MFA/SSO solution.

This article walks through the configuration of the Cisco Duo monitoring app.

How to Set Up

Browse this section