You can make it read only but blocking specific application ( like .jpg , mpeg is not possible)
You may need to consider DLP for this requirement. SEP is AV product only these features help you more in stopping viruses rather than data loss prevention /monitoring