First point, your best option is to call support and ask that question, as you are right there is no setting in the portal that will help you set that up. For the second point, when you are blocking the user, its for Internet traffic, just as any other user in your local network. a wired user can bypass the block by using the wireless connection. If there is a concern about the access for that user, the policy should be to remove the Authorization in the portal / AD.
... View more
