Endpoint Protection

How to configure device control policy for

1>Block Data Cards and allow USB storage.

2> All Bluetooth

refer to these article 

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection (SEP).

How to block USB Devices, Excluding the Mouse and Keyboard, in the SEP Manager

Block or allow devices in Endpoint Protection

I want  to Block Data Cards and allow USB storage

then you will need to find the Device ID of the Data cards that you want to block with help of DevViewer. then add it to the hardware devices from the below path.

Policies  --> Policy components --> hardware devices

once the above task is accomplished then you can add the device id to the blocked devices in ADC policy. which will then in turn allow USB storage and block the data cards alone. 

use this article for reference :

Block or allow devices in Endpoint Protection