I have not looked at Protect yet, however for Network you can disable remote login after creating a local account. Open Network app on IOS and make sure you go

I have not looked at Protect yet, however for Network you can disable remote login after creating a local account. Open Network app on IOS and make sure you go the main page that list the controllers. Click on the arrow. Next screen you will see a section called “Launch Type” which list all the access methods, local IP 4, IPv6 and cloud. Pick the local IP adresss.