One way that shall work:
- Once you have the host/group, create a time condition from 07:30 to 22:00 for the allowed connection time (UI does not allow first value higher than second one).
- Create a firewall rule accepting traffic from the host/group to red within the time condition.
- Create a rule at the bottom to always drop/reject traffic from the host/group to red.