How to end user session?

First, I would do a deep dive into who generates the traffic? Is the user and the device, originating the traffic, authorized on your network? Is the web site allowed by your organization policy? Next, you can either quarantine, block, or allow this traffic during given times of the day or night.