Hello,
I would suggest you to check this Thread:
https://www-secure.symantec.com/connect/forums/datacard-policy
Put this
USBSTOR\DISK*
========================
■ Any USB storage device:
USBSTOR*
■ Any USB disk:
USBSTOR\DISK*
■ Any USB SanDisk drive:
USBSTOR\DISK&VEN_SANDISK*
=========================
Basically when we plugin the USB data card, system always first detect it as storage device.
Once it is detecting data card, it will then try to install modem drivers on the system even though they already installed. But because it is blocked it fails to work correctly and the next step does not start.
And when we apply device control policy for blocking USB drives with the exclusions of USB keyboard and mice and the Device ID associated with the data card. The data card gets blocked even after creating an exclusion for the same.
So, even when we are creating a rule to block USB with an exclusion to data card, it blocks the DataCard.
Hope that helps!!