One of my customers would like to block facebook.com. I have added facebook.com to the forbidden domains in the access policy and it doesn't seem to do anything. I have also blocked as many of facebook's IPs as I could find and still nothing. It will block me from pinging those IPs, but not http. Any ideas?