You may want to suspend a user if you notice suspicious activity around a user or their device. For example, if it is after normal working hours and you notice that the user's device is a target of attacks, you can suspend the user quickly to limit a hacker's access if the user is compromised.
You can suspend a user from the following applications, if applicable:
Microsoft 365
Okta
Duo
You can suspend a user through the View Ticket page.
To suspend a user from Microsoft 365, Okta, or Duo
In Barracuda XDR Dashboard, open the details of a ticket by doing one of the following:
Click Intelligence > Security Overview, then click a ticket. Click the View Ticket Details button in the top right.
Click Intelligence > Alarms & Alerts, then click a ticket. Click the View Ticket Details button in the top right.
Click Intelligence > View Ticket, then type a ticket number in the search box and click the magnifying glass to search.
In the Target User row, click Suspend User .
Enable any of the following check boxes:
Microsoft 365: revoke sessions and block sign-in
Okta
Duo
Click Submit.