Firewall Rules for Allowing Browser Based Web Tools Like Snapinsta on Business Networks

I am configuring content filtering rules on a Netgear business firewall for a small marketing agency where staff regularly use browser based media retrieval tools like Snapinsta to recover original quality Instagram assets for client campaigns. Since these tools operate entirely through standard HTTPS requests in the browser without requiring any software installation the firewall has no straightforward way to distinguish their traffic from regular web browsing. I want to create a specific outbound rule that allows this traffic cleanly without broadly opening up social media access for all users on the network. Has anyone configured Netgear firewall rules to handle this type of browser based web tool traffic and found an effective approach that balances access control with productivity needs.