Suspending Users from Office 365, Okta, or Duo

You may want to suspend a user if you notice suspicious activity around a user or their device. For example, if it is after normal working hours and you notice that the user's device is a target of attacks, you can suspend the user quickly to limit a hacker's access if the user is compromised.

You can suspend a user from the following applications, if applicable:

• Microsoft 365

• Okta

• Duo

You can suspend a user through the View Ticket page.

To suspend a user from Microsoft 365, Okta, or Duo

1. In Barracuda XDR Dashboard, open the details of a ticket by doing one of the following:

   • Click Intelligence > Security Overview, then click a ticket. Click the View Ticket Details button in the top right.

   • Click Intelligence > Alarms & Alerts, then click a ticket. Click the View Ticket Details button in the top right.

   • Click Intelligence > View Ticket, then type a ticket number in the search box and click the magnifying glass to search.

2. In the Target User row, click Suspend User .

3. Enable any of the following check boxes:

   • Microsoft 365: revoke sessions and block sign-in

   • Okta

   • Duo

4. Click Submit.