Is the rule really kicking in?
Move the device to another OU, so you see the rules are removed, and then move it back,
Also, make sure all settings are in the Kiosk section, as User settings aren't applied to Kiosk devices.
You can also test adding http://* and https://* to the blocking rule.
--
https://wheretofind.me/@NoSubstitute