Is it possible to have some sort of control on who can access what mail box from where?

ie. my client does not want that to be accessed from outside of the company, while should be able to access his/her email from outside.

Don't ask me why they want this.