You may want to suspend a user if you notice suspicious activity around a user or their device. For example, if it is after normal working hours and you notice that the user's device is a target of attacks, you can suspend the user quickly to limit a hacker's access if the user is compromised.
You can suspend a user from the following applications, if applicable:
- Office 365
- Okta
- Duo
You can suspend a user through the All Tickets list on the Security Overview and the Alarms & Alerts page.
To suspend a user from Office 365, Okta, or Duo
- In Barracuda XDR Dashboard, click Intelligence, then one of the following:
- Security Overview
- Alarms & Alerts
In the All Tickets section, click a ticket.
- In the Suspend User row, click Suspend User.
- Enable any of the following check boxes:
- Office 365
- Okta
- Duo
- Click Process Actions.