500 end users, MFA needed, can't require personal phone use

Is our only option Yubikeys at this point?

We have DUO for an extremely low price per user because we have an EA with cisco so covering all users with DUO isn't too expensive (we currently federate M365 with duo). Right now we have to whitelist the network egress IPs (we have dedicated IPs) because we don't have a "device" end users can use for MFA. Imprivata quote came back too high for us to afford retrofitting all PCs with …

can cisco cybersecurity duo egress end ips isn low m365 mfa network personal phone point whitelist