Hi,
You can disable remote CLI by modifying the EMS configuration file, config.lua. Under acceptors, change the line ip="0.0.0.0" to ip="127.0.0.1" for both inboundJsonCli and inboundHttpJsonCli protocols. Restart the EMS after making the changes. Only local CLI will be allowed after restart.
Cheers,
Don