Do you want to completely cut off access to the users from home, or do you want to give them less access from home than they have on the lan. If you want to completely cut off all outside access, you can do that at the firewall level by blocking port 1494.
You may also want to take a look at Ctirx Access Gateway which will give you more flexibility.