cisco AnyConnect VPN with(out) DUO 2FA A user's status can be set as 'Bypass' in the Duo Admin Panel (to bypass 2FA), but as an exercise we can also use Duo's Auth Proxy along side a separate authentication server in an environment with Duo 2FA users and non-2FA users.