As I have more than 100 aliases, it does not make sense to create compliance policy one by one.....
If Aliase can't tanslate to sourse address, it should not allow people to configure it from Mail Security version. (And in SBG guide, I can't find a word which mention I can't do it ..)
Now, I feel symantec trapped users into using it....