Hi @cpalacios,
From researching a little bit, it looks like that fireoscaptiveportal is either the login screen, or the device looking for an internet connection to send data in the background. Unfortunately, this is simply something that is done by the tablet to keep the information and apps up to date.
To try and limit the amount of time in which the tablet will send this data I would recommend going into each tablet's settings and turning off the option for background app refresh.
Communications with the device could also be caused by an application being left open on the tablet. The most surefire way of preventing these from communicating with the Deco is to turn on Airplane mode while your kids are at school, or having your kids leave the tablet on airplane mode when they aren't using the tablet or the internet.
Lastly, there is a pause button next to each profile, this pause button restricts the internet usage for that device immediately. I do not know if this would prevent the tablet from using your kids allotted hours however. If you do try any of the above, I would love to hear what worked out the best for you.
Also, people in other threads have discussed the fact that your kids can extend their internet time by disabling their own internet when not doing anything requiring a connection. Such as basic programming, or installed games.
I will also pass feedback onto the team that you would like to be able to restrict access on one device using multiple profiles. This would potentially allow you to schedule no internet access during schooldays and change to allotted time while they are at home.