Hi
If you google for POD or Packet Of Death you'll see there have been various schemes to implement a message that will instantly disconnect a user from whatever network resource they are using (or abusing) - I think there might even be a RADIUS RFC on it.
ACS doesnt implement any such back end features though.