What does remote access use to verify identity?

MFA verifies a user's identity by requiring two or more independent authentication factors - such as a password combined with a one-time passcode or biometric - ensuring that compromised credentials alone are insufficient to gain remote access. This layered approach is the primary control Cisco and industry standards recommend for securing remote access sessions.

Agents are software components deployed on endpoints for tasks such as monitoring, policy enforcement, or telemetry collection, and do not perform identity verification for remote access.

Remote Access VPN establishes an encrypted tunnel for secure remote connectivity but depends on an external authentication mechanism such as MFA to verify identity - it does not verify identity itself.

AMP for Endpoints is Cisco's Advanced Malware Protection solution designed to detect and remediate malware on endpoint devices, not to authenticate or verify user identity for remote access.