This applies to all Email Security Gateway models, on any version of the firmware.
The VRFY SMTP command is actually already disabled by default.
You can telnet to the Barracuda on port 25 and issue a VRFY command after the 220 banner: Upon doing so you should see:
502 VRFY command is disabled
Link to This Page: