Security messaging gateway end user quarantine.

When attempting to Upgrade SMG from 10.0.3-3 to 10.5.1-2 it disabled end user quarantine for all policy groups besides default.

Tech support said both control center authentication and Email scannning needs to be enabled to enable. This adds the

requirement that the scanners have to communicate with the ldap server or else mail does not get processed. This adds a new point of failure for mail delivery.

We don't need the scanners to communicate with ldap and add another point of failure for mail. Is there another configuration where i don't have to enable email scanning and have policy groups enabled for end user quarantine?