When Safe Internet is deployed to devices VPP apps fail to install and present a bag load error or network error in management tab.

When Blocking App Store category in Safe internet it's blocking it from a network level and not allowing a local level. This will not block the app locally on the device but it will block all related app store and VPP network traffic.

To remediate the issue please navigate to Jamf Safe internet > Polices > Web protection Policy > Content Rules > App stores and Allow the Apple App Store.