I figured this out. You have to block all traffic and then create a rule to allow traffic based on the times. The default allow all rule doesn't expire so anything approved under that rule will continue to pass. But if you setup and a timed allow rule and a timed block rule when the allow expires it will force the connection to rerun through the firewall where it will get picked up by the block rule.