Block DMZ Host access to internal network

hi

I am setting up a DMZ Host on a G1100 router. By default, it appears that the machine has access to all other machines on the internal network. I do not believe this is normal. Is there a setting somewhere to prevent it?

thanks