You can also block SSL connections completely, but I think that WCF CAN test/check SSL connections...someone showed
it to me a while back I think...but check with support.

hi, in the case of facebook, i spend to much time, but that option can be set

these are facebook dns

66.220.144.0 - 66.220.159.255
69.63.176.0 - 69.63.191.255
69.171.224.0 - 69.171.255.255
204.15.20.0 - 204.15.23.255

you should set this at ip object, and set the dns with range adresses

then you create url content filter rule, and then Firewall Filter Setup to create a data filter