First Match Wins
Each user (sender or recipient) is evaluated for each mail policy defined the appropriate mail policy table in a top-down fashion.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html?bookSear ch=true

If you are unable to access the user interface of the Cisco Secure Email Gateway appliance after manipulating the subnet mask, you can use the serial or console port to perform the initial configuration. The serial or console port provides a command-line interface that allows you to configure basic network settings such as IP address, subnet mask, gateway, and hostname.

To create a DLP policy that specifically targets preventing the sharing of proprietary patent documents via email, the network administrator should use a custom policy template. A custom policy allows for the creation of tailored DLP rules and matching patterns based on the organization's specific requirements and data protection needs.
While regulatory compliance, acceptable use, and privacy protection policy templates may provide some predefined rules and patterns, they may not directly address the specific requirement of preventing the external sharing of proprietary patent documents. Therefore, a custom policy template would be the most suitable option as it provides flexibility in designing and implementing DLP rules specifically for the organization's unique data protection objectives.

After creating the DMARC verification profile, the administrator must apply a DMARC policy action for domains whose DMARC record specifies reject. Configuring AsyncOS to reject those failed messages enforces the sender domain's DMARC policy and allows the appliance to return the required SMTP 550 response.