Refer to the exhibit.

To protect against Directory Harvest Attacks, the administrator must configure D irectory Harvest Attack Prevention in the mail flow policy that applies to the listener. This will enable the Cisco Secure Email Gateway to reject or throttle messages that are sent to invalid recipients by checking the LDAP server for valid email addresse s.  References : [Cisco Secure Email Gateway Administrator Guide - Configuring Directory Harvest Attack Prevention]