VxRail SRS Disable incoming connections without Policy Manager?

Hi,

I have a customer which uses internal SRS in a newly deployed VxRail Cluster and would like to disable the ability for Dell EMC to connect remotely to their SRS machine, they still would like to send heartbeats so that the support proactively can notify them of any issues in the cluster but the support should not be able to connect to their SRS instance by default.

Is there any way to accomplish this without having to setup a separate Policy Manager server?

if not is there any documentation covering how to setup SRS policy manager in the most basic way to just deny incoming connections in a small environment consisting of a single VxRail cluster?