Marketo automatically de-dupes based on the email address field only. Do the two leads have different values in the email field? If you haven't already discover it, the Possible Duplicates smart list in the Lead Database is pretty valuable for de-duping. For third party de-dupe vendors, I like CRM Fusion.