A good recommendation is to set the Empeg address to something unroutable and limit access that way. Not setting a default gateway on the player goes some way towards limiting remote access too.

See "accessing the player on a different subnet than the PC" here in the FAQ.