I have bought and set up a pair of Deco X55 mesh routers. They are being used only as wi-fi access points, with router functionality delegated to the ISP router.

I noticed that I am able to access the APs status when outside of the network, which is an unnecessary risk. Even initial set-up should be able to be done just locally, but it's acceptable if post-configuration the access points can be locked to the local network. 

How can remote management of the access points be disabled and restricted to the local network? 

Thank you