Who rated this post

Few things to explain here:

1. Both the App store and Google play are imbedded within the device OS so HM cannot interfere and block an application from being installed 

2. This is something that might be done by the MDM if you tag an app as forbidden but it depends on the MDM capabilities. since the MDM doesn't control the Android Private side, it controls only the Work side, you cannot block a user from installing the app on the private side

3. What HM can do in the policy is tag an app as allowed/not-allowed (black/white listing) that means that after installing the app HM will alert as high risk and  request the user to uninstall it. This can be accomplished on the package name level (bundle_ID) or on  a specific version of the package name (the UI Expects a package name of the app not the SHA256/SHA1)

Yuval