Managed Cisco Essentials Identity & Access Protection

Stop Account Takeovers Before They Happen — Managed Identity & Access Security

Stolen passwords are behind the majority of data breaches. Cisco Duo, managed by Small Robot, makes sure that even if a hacker gets hold of a password, they still can't get in.

Duo adds a powerful, phishing-resistant layer of identity verification to every login — and Small Robot's team manages and monitors it 24/7 so you don't have to.

What's included:

• Strong Multi-Factor Authentication (MFA) — Verifies every login with a second factor, even if passwords are compromised
• Passwordless authentication — Let users log in securely without a password at all
• Free authenticator app — Easy, app-based verification for your team
• Single Sign-On (SSO) — One secure login that works across all your business applications
• Granular access policies — Control who can access what, at an application-by-application level
• Trusted endpoint verification — Confirm every device meets your security standards before granting access
• 24/7 monitoring by Small Robot — Our experts watch for suspicious access patterns and respond fast

Why this matters:
Phishing emails trick employees into handing over their passwords every day. With Duo's phishing-resistant MFA in place, a stolen password alone is worthless to an attacker. It's one of the highest-impact, lowest-friction security controls a business can implement.

*Requires an Australian ABN. Price is per user on a 12-month subscription. Contact us for teams over 100 users.*

---

FAQ — Cisco Duo Identity & Access Protection

Q: What is Multi-Factor Authentication (MFA) and why do I need it?
A: MFA means verifying your identity with something beyond just a password — typically a second factor like a phone app approval or a code. Since most breaches involve stolen credentials, MFA stops attackers even when they have a legitimate password.

Q: What does "phishing-resistant" mean?
A: Standard MFA (like SMS codes) can still be intercepted or spoofed by sophisticated phishing attacks. Duo uses modern authentication standards (like FIDO2/passkeys) that can't be replicated by a fake login page — making it dramatically harder for attackers to bypass.

Q: Will this slow down or frustrate my team?**
A: No — Duo is specifically designed to be easy for legitimate users. Risk-based authentication means your team won't be bombarded with approval requests for every routine login. Friction is reserved for unusual or suspicious access attempts.

Q: What is Single Sign-On (SSO) and does my business need it?
A: SSO lets your team log in once and access all their business apps — email, file storage, CRM, project tools — without logging in separately to each one. It's more secure (fewer passwords to steal) and far more convenient for staff. Most businesses with 10+ staff benefit significantly from SSO.

Q: What is a "trusted endpoint" and how does it help?
A: Trusted endpoint verification checks that the device trying to log in meets your security requirements — like having up-to-date software, encryption enabled, or an approved operating system. Unrecognised or non-compliant devices are blocked, even with correct credentials.

Q: Can this work alongside our existing Microsoft 365 or Google Workspace logins?
A: Yes. Duo integrates with Microsoft 365, Google Workspace, and hundreds of other business applications. Our team handles the integration as part of onboarding.

Q: We already have MFA turned on in Microsoft 365 — do we still need Duo?
A: Microsoft's built-in MFA is a good start, but Duo provides phishing-resistant authentication, centralised policy management across all your apps (not just Microsoft ones), device trust verification, and expert monitoring. It's a significant step up in both security and visibility.