Here's the method:

In the AdminTool > Advanced > Security:
- Block standard RDP clients : YES
- Block WAN RDP clients : YES

In the AdminTool > Web > Web portal > Web portal preferences > un-check "RemoteApp"

In the Windows Firewall, in the RDP port rule, deactivate the WAN access.