About using the address resolution function with your data source
The address resolution function resolves alias and distribution list data to let you apply policies on a per-user basis. You accomplish this using LDAP-based group memberships to define policies.
Enabling a data source for address resolution offers the following benefits:
The system can resolve directory group and distribution-list membership so that scanners can apply filter policies to policy groups. Please note that distribution list expansion must be enabled to apply policies to users in distribution lists.
When address resolution is enabled an optional group listing query is enabled automatically. This function lets you more easily define policy group membership by selecting from a list of LDAP users and groups. When you configure the group listing query, the groups list in the Add Policy Groups page is populated with a list of all LDAP groups (including LDAP distribution lists) retrieved by the query.
You may select groups from this list to add to policies or add groups by entering the LDAP group distinguished name yourself. If you have a large number of groups in your organization, you may want to disable this query when configuring your data source.