This may also be of assistance
View Document
This is assuming that you need to block access to FB on BBs but NOT over web browsing on company PCs etc. If they want to block FB from everywhere, it might be easier to get BES to browse via corporate standards (ISA) and block FB on ISA.