I found in the Profile Manager manual that apps need to be installed on the server for them to be restricted. I installed Firefox as a test and quit Safari that I was using to access Profile Manager. Logged back in and it picked up the applications.
This won't work on client machines.
Hopefully that helps.
Retrieving data ...