Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
For this, I’d look at the FirePOWER file policy rather than trying to block the . apk extension through a basic ACL. File Control can inspect and block supported file types when the file policy is attached to the appropriate access control rule.