Yes, go to the clients list (Network-Wide > Clients), find the device and click on it. The scroll down and change the policy. Set the access to your ssid to blocked.
Mind you that there's a limit to the number of clients which you can block this way (3000).

If the client has not yet connected to the network you can also do it on beforehand from the clients list.
