Yup, all perfectly possible via the Whitelisting feature either in the Device Control, or Storage Control panels.
You can allow devices by specific models or distinct devices.
More info can be found in the Admin Guide:
http://www.symantec.com/docs/DOC4679