@KMNEP thanks!    I did not test that. However, in our network configuration, mobile phones connect to a different VLAN with a different rule-set. I've asked the Meraki team to create a clear split on layer-7 for the two different services (Facebook, Workplace). The problem is that most addresses are the same/similar, but the IP ranges are different. I'm not sure how soon and if they pick this up. ... View more

Thank you for your quick response. It worked almost 90% with your soution. However, it was not showing all elements (status indicator/image of contactperson/etc). I've resolved some of them by adding a couple of lines to the whitelist:   workplace.com pixel.facebook.com fbsbx.com fna.fbcdn.net akamaihd.net work.facebook.com workplace.facebook.com static.xx.fbcdn.net fbsbx.com fb.com scontent.fcrk1-1.fna.fbcdn.net scontent.xx.fbcdn.net *chat.facebook.com *mqtt.facebook.com edge-mqtt.facebook.com graph.facebook.com   This is the complete list I'm using now. Some may be redundant, but I'm still testing. The one problem is that when you use fb.com in your browser, it redirects you to facebook.com showing the page. I didn't test to log in as I don't have a facebook account. The url facebook.com works after. When you remove the cache and try facebook.com it will be blocked again.   Do you know if login is possible or will it be blocked when a user tries to log in?   Coen   ... View more

Hello Troyee,   Thanks for raising this issue. I've tried to apply the steps you describe, but it doesn't work. Could you please specify the URL patterns that you are using to block facebook?   Do you block these on the group policy level or the content filter level. So far I found that facebook url patterns are the same as workplace, so I'm not sure how it will work.   Thank you for your help with this.   Best, Coen   ... View more