Does SEP 12.1 have special abilities with respect to managing Java threats?

Yesterday John Strand and Paul of Pauldotcom put on a great webinar with respect to the current concerns (and hyseteria) over Java vulnerabilities:

https://www.sans.org/webcasts/uninstall-java-realistic-recommendation-no-insanity-yes-96192

While discussing the various countermeasures (using Proxies, GPO, etc), they mentioned that SEP 12.1 brought new tools that can be used for Java defenses.  They didn't get into detail, and I can't find anything in the documentation or the SEP or SEPM GUI.  Any idea what they were talking about?  What I would REALLY love is to identify all of the legit Java apps (we really don't have that many) and then create a java applet whitelist with SEP-- is that possible? 

Much thanks in advance,

Bill