NAT Rule for E-mail server with schedule time block

Hi everybody!

I've just installed a new XG210 and I've created a DNAT rule for Exchange Server (for normal mail ports) and for the Autodiscover I'm using the Template provided by sophos.

My need is to control the work of this nat based on a schedule. For weekends and after work hours I need to block all access to e-mail server to all client and Web protocols and enable only port 25 to continue receiving my e-mails.

In the last firewall I create a NAT and in the forward rules have create the block rule based on the schedule. I've tried to use the same scheme in Sophos, but it didn't works.

If I test with policy tester it show that the packet is dropped, but if I try the connection from WAN zone it connects normally. 

What should I do to make it works??

I'm using the 17.5 version ok!

Thanks!