normally that should work. First of all, the most important thing is to inspect SSL traffic. Otherwise you cannot manage facebook.
There is a ruleset available in the Online Ruleset Library where you can completely remove the facebook chat widget. So, the user gets no error message, the whole facebook chat windows is just missing.
I am trying to find a way to hide the widget again but it doesn't seem to be easily doable.