FAQs - Posture Check

Device security, or posture, checking uses the data supplied by your device to check whether your system is up-to-date and secure.

Cisco Duo does this by using the data provided by your web browser when you sign in with your University account to check whether your device is running a supported operating system. If it detects that your system is out of date and unsupported it will display a warning like those shown below:

<<Insert sample screenshot>>

General

Why are you doing posture checking?

It is important that we keep our systems and data protected against cyberattacks and unauthorised access and all staff and doctoral researchers have a responsibility to keep personal devices secure in like with the Mobile and Remote Working Policy.

Making sure all devices are supported with the latest security updates installed protects our systems and data against common malware infections and exploitation techniques used by hackers.

Device

How do I keep my device up to date?

Make sure you have automatic updates turned on in your system settings and that you install any pending security updates as soon as they become available. For guidance on how to do this, consult the manufacturers documentation for your device.

I am being prompted to update my Windows Staff Managed device, but no updates are available

For University-owned devices on the Windows 11 Staff Managed service, updates will be pushed out to your device automatically. Regularly turn on and connect your device to the University network either in person or by using the VPN to make sure these updates reach your device. Update and restart your device as soon as possible when updates are made available.

I am being prompted to update my personal device, but no updates are available

Duo relies on the self-reported version by the web browser which can vary in accuracy. To improve the accuracy of this reporting, consider installing the Duo Desktop app

My device is running an unsupported operating system and cannot be updated any further

We are unable to offer support troubleshooting personal devices reporting incorrect data to Duo.

*Update to add point about EOL devices no longer receiving updates and needing replacement*
Use an alternative, supported device, such as campus PCs, for any University-related activity.

Do not use the unsupported device to access University services and data, such as email, OneDrive, myHR, etc.

Data

What data does Duo Desktop collect?

Duo Desktop collects information on your system health and security status. It never accesses personal files, erases data, or changes settings without your permission. 

For details on the data collected by the Duo Desktop application, please see the following Duo article: What data does Duo Desktop collect?