Isn't graceful degradation (in support of older browsers) the main feature of Socket.io?
If you can block them (ie: the user needs to login), you don't need to wrory.
It's really common for web sockets not to work through corporate content filters and old load balancers.
Not Microsoft. It's unsupported as of 2 months ago.