Allowing All Web Traffic Except Social Media Sites

That would need you to create a web policy.

A web policy that would block every social networking site.

You can go to Web>Policies on the XG interface

Select "Add" at the top to create a new policy and select the category of sites you want to block.

Default action should be left at "Allow HTTPS" (because if you block it, you will be blocked from any site if that policy is enacted on your firewall)

Next is, create a LAN to WAN firewall rule (network, or user rule. Depends. Since you want to group, and not make it happen over your network, then...)

Then, choose the web policy you created earlier, enable logging and save at top.

This would definitely allow all traffic from your network to the internet except from those who want to visit social media sites

That would need you to create a web policy.

A web policy that would block every social networking site.

You can go to Web>Policies on the XG interface

Select "Add" at the top to create a new policy and select the category of sites you want to block.

Default action should be left at "Allow HTTPS" (because if you block it, you will be blocked from any site if that policy is enacted on your firewall)

Next is, create a LAN to WAN firewall rule (network, or user rule. Depends. Since you want to group, and not make it happen over your network, then...)

Then, choose the web policy you created earlier, enable logging and save at top.

This would definitely allow all traffic from your network to the internet except from those who want to visit social media sites