I would like to know in AMP endpoint protection, can we control peripheral devices like USB, DVD as Block, read only and full permission. Hope your advice
today AMP for endpoints has no capabilities to manage Removable Storage in any way. So you need a 3rd Party solution for management. AMP4E has a focus on Threat Protection and Threat Response.
For future planning of our endpoint products you may contact your Cisco Representative to open a Feature Request for you.
There's little point in time expenditure to raise a feature request because feature requests are really just an expression of interest. Cisco will mostly ignore feature requests until there’s a significant value for Cisco to pursue them.
Googling around will show you other products that will achieve data blocking.
From what I am seeing, there is not one single tool that does everything.