To make sure that everyone at your organization can use Workplace effectively, you may need to configure your network to allow certain domains and IP ranges. Find out more about network configuration on the Customer Resource Center.
You can't block access to Facebook as Workplace is built on the same technology that powers Facebook. Any domain restrictions that prevent network access to Facebook would also affect Workplace.
For Workplace to function properly, you need to ensure that all traffic to the following domains (including all subdomains) and ports is unblocked and enabled for your company networks:
- .workplace.com 80/443
- .facebook.com 80/443
- .akamaihd.net 80/443
- .fbcdn.net 80/443
- .fb.me 80/443
- .fbsbx.com 80/443
Note: The domains used by Workplace are subject to change, and as such this list shouldn't be considered exhaustive. Selective blocking of Facebook domains isn't officially supported for Workplace, so these domains are provided for reference purposes only.
If you need more control over access to Workplace on a corporate network, you can choose to allowlist the IP ranges of Facebook web servers from which Workplace is served.
Facebook's Autonomous System (AS) number AS32934 can be used to retrieve an accurate and up-to-date list of IP addresses of Facebook web servers. For example:whois -h whois.radb.net — '-i origin AS32934' | grep ^route