Security

Dear Experts, 

When the guest account expires in clearpass, is it possible to send CoA to controller to disconnect all devices associated with that guest?

Yes, but that should only be necessary when you've edited the guest account and changed the expiration.  Normal operation you should always be setting the Session-Timeout to coincide with the account expiration.