Assumption: each NIC is assigned in a bridge. That's default and OK.
There are several solutions for your wish, for example limiting "Listen" for the relevant processes or establishing iptables rules.
But approach "zero" is by far the...
don't forget to re-enable it,
because without Windows snapshot, copied data isn't consistent ( Windows may not boot because registry corrupt, sql doesn't start because data corrupt)