You have to set “Software update policy = Locked”
This should be explained in the manual:
http://docs.nethserver.org/en/v7/packages.html#software-updates
However we have a bug with automatic updates, as described here https://github.com/NethServer/dev/issues/5665 and here: Unexpected (auto-)update to 7.6.1810