Here's the method:
In the AdminTool > Advanced > Security:
- Block standard RDP clients : YES
- Block WAN RDP clients : YES
In the AdminTool > Web > Web portal > Web portal preferences > un-check "RemoteApp"
In the Windows Firewall, in the RDP port rule, deactivate the WAN access.