Facebook IP Group with IP address range exclusion

Hello,

I'm attempting to build an IP group for Facebook, which works fine. However, when I attempt to add an 'exclude' IP address range, then data collection for the group stops altogether.

Below is an example of what I'm trying to do. My expectation is the following IP group would capture all traffic to/from the the 'included' IPs (Facebook) except in those cases where the excluded IP addresses are either a source or destination associated with the Facebook IPs. What am missing?

Thank you- Ron

Facebook Internal
Speed : 1000000 bps


Description : Office Access to Facebook
IP Address(Netmask)
Include - 66.220.153.15 ( ---)
Include - 69.63.187.19 ( ---)
Include - 69.63.181.11 ( ---)
Include - 69.63.181.17 ( ---)
Include - 69.63.181.12 ( ---)
Exclude - 10.0.1.100 to 10.0.1.139 ( 255.255.255.0)

Port (Protocol)
All

DSCP
All

Associated Interfaces:
wanrouter1.g... (Internal Net...)