This one of those questions I am overwhelmingly eqipped to answer, but only with the weird proprietary knowledge about software defined networking and microsegmentation that my job has endowed me with...
So I'll resist the urge to give you that overcomplicated answer and just say get a firewall like others have suggested.