Hi jjgrein, there is nothing built-in to automatically accomplish this, however, the standard path for most orgs is to deploy a script to configure the interface as Private and utilize that profile in your firewall rules as necessary.