Endpoint Protection

We have an issue here with some computers that are used for clients/public.
We've discovered some folks are coming in after-hours and using the client login and surfing anonmyously, well, under the client login ID.
Is there a way to set up any rule in SEP, say a firewall rule, that would block anything coming or going on a schedule?
Say "block all between 6pm and 6am" for example?

 You can add a block all rule and set its timing in firewall rules. In the rule windows you have the option for time..you can double-click on it and define it.

Really? I must have missed that
 
I'll take a look, that would be too cool..............

Well, gee, I did miss that TIME column..........
Now if it could block all web traffic all weekend, and all web traffic weekdays from 6pm to 6am, that would be ideal.
I don't have the go to make it happen yet, but I can report that there IS that option, and the neat thing is that I can apply it ONLY to IE and only to web traffic, let weekend updates and software rollouts work as normal.
This is great.