It didn't make sense to me, but the morning after I installed an MX-64 with advanced security, the client site was unable to get to Facebook. It seems to be Geoblocking doing it because once I removed the rule, the users were able to load FB in their browsers.   I had the layer 7 rule configured such that only traffic from the US and Canada was allowed (client site in the US).   I pinged and traced to Facebook from the client site, and it was a few hops away in a DFW data center (at least the farm my client network hits). I could ping it, traceroute to it, but not connect on port 80 or 443 to it.    Any idea what I am not seeing?   Thanks,   Dallas ... View more