During scheduled time - overrides the reject setting in a firewall rule

Question

I am using XG 17.5.0 
 I set a firewall rule based on IP to reject a connection therefore turning off network access to that device. This works correctly. 
 When I add the "During scheduled time" by choosing School days as the option the network connectivity is allowed even though the rule is still set to "Reject". The hour when this was tested was outside the allowable school hours. 
 Is this a bug or am I missing something?

Nicholas Miles · Answer

I finally got some time to review your comments and play with the firewall rules. I was able to resolve this but it does seem counter intuitive. Your comments were helpful in figuring this out. In the end I used two rules to accomplish what I wanted. I cloned a second rule, right after the active rule, that simply rejects the device based on IP. If I choose the "during scheduled time" rule and the time is outside the accessible time the rule get's bypassed and as a result gets rejected by the second rule. 
 Seems to be working for now. I'll be testing it more as the family uses the system this week.