I stuck my foot in my mouth. I have told a client with a small 15 pc network that I could setup a policy to block Facebook.
I went into the web filter and setup to block http://www.facebook.com.

I think the problem is that the content filter can not block https:// traffic.
I read some posts on stopping the traffic with IPfilters to setup with the various IP addresses. I don't find this to be a good scalable solution if we have a change with facebook IP addresses.

This is not only for facebook but I need to do this for twitter etc..

Any ideas?