The 'Disable new apps in content update' option is new for PAN-OS 7.1.
Video Transcript:
This is Joe Delio from the Palo Alto Networks Community team.
This video is going to be covering a new option that started with PAN-OS 7.1. This new option is called Disable new apps in content update.
Where can the 'Disable new apps in content update' option be found?
This option is located inside the WebGUI, go to Device > Dynamic Updates, then click to the right of the 'Schedule' for Applications and Threats.
This action will pull up this window, where you will see an option to Disable new apps in content update. If you want to enable it, you will need to select this option and commit the config first.
Why is this here and what does it do?
When scheduling recurring downloads and installations for content updates, you can choose to Disable new apps in content update. This option enables protection against the latest threats, while giving you the flexibility to enable applications after preparing policy updates that might be necessary for applications that are newly identified and possibly treated differently following the update.
How do I know which new applications have been disabled? In order to know what new applications have been disabled, you will first be given the option on the Device > Dynamic Update screen by clicking Apps (see above).
If you have already installed the new Apps and Threats content with the Disable new apps in content update option enabled and were not able to review the new apps from the above windows, then you can view this information by going into the Applications window located under Objects > Applications.
In order to see what applications are disabled, click on the drop down next to all, and select Disabled applications.
To enable an application, you have 2 ways to do this:
The first way is to select Enable in the application details window (above).
Or, from the Applications window, select the application, then click Enable on the bottom of the window:
I hope this explains this new option well.
As always, we appreciate all questions and comments below.