Facebook / Instagram APPS not working with decrypt and scan

Question

Hi All, 
 I am running into an issue with Sophos XG and the decrypt and scan feature. I have a firewall policy that identifies clienteles users from a particular group and has web policy set to Allow All and Application Policy set to Allow All. From multiple iPhones with the facebook and instagram apps installed, new content is not loaded from within the apps. From the same devices Facebook and instagram work from the browser. The logs seem to show that access is permitted, but the content does not refresh. The only unusual thing that I see is that the destination country is IRL for these services although I am in the US. This is true for both the app and the browser so I don't know that it's the cause, but it does seem unusual that FB wouldn't use a US datacenter. I don't believe that I have any country blocking enabled. If I simply turn of decrypt and scan the app works again, but I'd prefer not to have top do that. Has anyone seen this? 
 Thanks, 
 Bill

Daniel Bingham · Answer

Hi Bill, 
 
 I posted that I was too having this issue, but I think I have worked out Instagram at least. 
 
 Head to: Protect --> Web --> Exceptions 
 Add a new exception with URL Pattern exceptions of: 
 
 ^([A-Za-z0-9.-]*\.)?fbcdn\.net 
 ^([A-Za-z0-9.-]*\.)?instagram\.com 
 ^([A-Za-z0-9.-]*\.)?instagram\.net 
 ^([A-Za-z0-9.-]*\.)?instagram\.net\.?/ 
 
 Enable: 
 
 HTTPS decryption and; 
 Policy Checks

I worked this out by heading to Diagnostics --> Packet Capture and then looking at the traffic which my phone was trying to hit, then created a Reg EX (stolen from lferrara 's post on problems with Whatsapp - here https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/100545/whatsapp-issue-with-web-protection#pi2151=1 ) 
 I hope this helps 
 
 Daniel