Allow modification of app filter default action
It does not seem possible to change the default action for an application filter once it has been created. While there may be little need for this in most use-cases, it would be tremendously helpful for one-off testing.
In fact not having this opportunity is a significant security risk!
If you have a rule that allows certain applications and have at the end a "deny - any Application" filter there is significant traffic still passing this rule beside the application you have excluded.
Even if you create only a "deny - any Application" filter by your own (not the predefined one) many traffic still passes this rule.
I can't imagen that simple stuff like whitelisting is still not possible...
This also has use in production environments. I can imagine some corner case scenarios where someone might want to allow a small subset of applications and block the rest. Doing this with a Default Action of Allow is more cumbersome than being able to first set the Default Action to Drop and then simply add the desired applications.