Checkpoint FW - Disable external access to EAC on Exchange 2016

Hi,

I'm using Exchange 2016 in my production and I want to denied ECP access from external (internet). How can I do it and where should be configure?

​

Thanks,