If your application is some website or citrix published and

if you have access to secpol.msc on the DB server you can also restrict access to sql server port for...