Suspending Users

On the Ticket Details page, you can suspend Microsoft 365 and Duo users. You may want to suspend users who have been compromised or who are currently being targeted.

1. In Barracuda XDR Dashboard, do one of the following:

   • Click Intelligence > Alarms & Alerts, click a ticket, then click .

   • Click Intelligence > View Ticket. Type a ticket number to view.

2. Click Suspend User.

3. Select one or both of the following checkboxes:

   • Microsoft 365: revoke sessions and block sign-in

   • Duo: suspend user account

4. Click Submit.