Security

Hey there! Is it possible to apply location-based tracking and policing with Aruba (allow/deny wireless access) of a client devices so, for instance, when a guest device leaves an office building, an access to Aruba network could be restricted?

How would we know the guest has left the building?

That's the whole question :).

I assumed that as we can track as a client traveling over the building with Airwave, we could somehow define zones that would be trusted or untrusted, that is inside or outside the building. Once a client device enters untrusted zone, some restrictive profile should be applied.

Know that sounds weird but that's a customer's requirment :). 

That is not something you can do with Airwave specifically.  Did you or the customer see that published somewhere?  

If there is no guest wireless outside of the building, the client would not be able to connect, would it?

The only thing would be to set the local-probe-request-threshold on that SSID to 20 so that an AP would need to hear a client at a certain level before it allows it to connect.  http://community.arubanetworks.com/t5/Controller-less-WLANs/What-is-local-probe-threshold-on-ssid-profile-configuration-on/ta-p/184476