Is there a way to add/create/configure a "Deny list" that disallows bad passwords
Any Version
The OOTB directory does not support the Deny list option. It does not have any settings where we can provide a list of passwords that are not accepted.
If you would like to see such functionality please consider creating enahncement request for CA directory.
In step 6 pick: "Symantec Directory".