The ironport box is a hardened SMTP relay, with content filtering... There are no POP3 features.
If you turn off SMTP, you might as well turn off the box... maybe you mean to ask about restricting which computers can send mail through the Ironport? or is this a firewall question? What is the actual problem you're trying to solve?