Ask the Community
Groups
Configure Cisco Duo Monitoring App - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="this-article-walks-through-the-configuration-of-the-cisco-duo-monitoring-app">This article walks through the configuration of the Cisco Duo monitoring app.</h2> <p><strong>NOTE</strong>: This app is currently in private beta and is not generally available for all customers.</p> <div><strong>Overview</strong></div> <div> <p>The Cisco Duo Monitoring App is designed to monitor log data for the MSP edition of Cisco Duo. It is designed to operate across all tenants within your Duo dashboard. This means that you will not have to authenticate the app to each customer within the RocketCyber console.</p> <div data-hs-callout-type="note"> <p>Requirement - To create an API Integration, the following steps can only be performed by a Cisco Duo user with an "<strong>Owner Role</strong>" permission.</p> </div> </div> <div> <h3 data-id="n-a"> </h3> <h3 data-id="how-to-set-up">How to Set Up</h3> </div> <div> <p>Login to the RocketCyber SOC console, navigate to integrations and select MFA, then Cisco Duo. The 3 pieces of information needed for this integration are: </p> <p>a. Your Duo <strong>Integration Key</strong></p> <p>b. Your Duo <strong>Secret Key</strong></p> <p>c. Your Duo <strong>API Hostname</strong></p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/9SP6VUK05FX6/cisco-duo.png" alt="cisco-duo.png" class="embedImage-img importedEmbed-img"></img></p> </div> <div>Navigate the following steps</div> <div>—> <strong>Applications</strong> </div> <div>—> <strong>Protect An Application </strong> </div> <div>—> search for “<strong>Admin API</strong>” </div> <div>—> click “<strong>Protect</strong>” and get the:</div> <ol><li> <ol><li>integration key</li> <li>secret key</li> <li>API hostname </li> </ol></li> </ol><p><img src="https://us.v-cdn.net/6032361/uploads/migrated/KQ7L1L36A1MT/cisco-duo-rocketcyber.png" alt="cisco-duo-rocketcyber.png" class="embedImage-img importedEmbed-img"></img></p> <div>Scroll Down and then</div> <div>—> give the API Integration a name like <strong>“RocketCyber SOC</strong>” and then</div> <div>—> select the <strong>“Grant Read Log”</strong> and “<strong>Grant Read Resource</strong>” permissions</div> <div><img src="https://us.v-cdn.net/6032361/uploads/migrated/D1TOMW4KVRQA/grant-duo-settings.png" alt="grant-duo-settings.png" class="embedImage-img importedEmbed-img"></img></div> <p>Scroll down and click <strong>SAVE</strong>.</p> <p>The final step is to copy the 3 elements and past them into the RocketCyber SOC console, then authenticate.</p> <p>Congratulations, Cisco Duo is now configured and the RocketCyber SOC has insight into your MFA/SSO solution.</p> </article> </main>