You can tell Panorama9 that only one or more specific applications should not be patched on one or more specific devices and/or Groups. This is done in 8 easy steps.
1. Go to Monitoring
2. Go to Thresholds
3. Click +
4. Add a sensible name
5. Choose Scope
6. Select Device(s) (by Device name) or a Group. If choosing Groups this can be both AD Groups and Groups you have created previously. Start typing the name of the Device or Group, and then select it
7. Start typing the name of an application you don't want updated (i.e. Java) and then select it.
8. Click Save