I don't know about the specific session, but you can lock out the account with zmprov ma theboss zimbraAccountStatus closed
Periodically grep mailbox.log and, when you see the session die, zmprov ma theboss zimbraAccountStatus active
Or you could iptables -I INPUT 1 -s their.ip.address -j DROP |