Symantec Endpoint Protection Device Control

What are the features of S.E.P's device control? 

I.e can it track data transferred from a server to a USB? Can it track if the transfers the data to a non-corporate server/desktop? 

Thanks,

Kimberley