Usually, only outbound email is sent through an SMTP Prevent server.
However, if the Mail Transfer Agent (MTA) is configured correctly, inbound email can be sent though an SMTP Prevent server. In that case, inbound email will be processed and they can be used to create incidents.