After CASB release 3.154 patch1, Facebook Workplace Gatelet blocks per Access Enforcement Policy as expected. This was initially set to update/resolve with 3.154.
CloudSOC Gatelet with WSS integration
workplace.com domain was not evaluated correctly.
Engineering added evaluation for the Facebook Workplace domain: workplace.com
For more information, see CloudSOC 3.154 Release Notes