SFTP block

[Herman]

Hi, everybody

It's necessary to block access to the sftp server from the external network.
How can this be done?
Will this affect the normal operation of Checkpoint?

[genisis__]

I maybe looking at this too simply, but I would have thought a deny rule with the source network to the sftp would be enough, followed by an accept rule from whitelisted networks or any.