Hello ,
You can create internal-only Port group
https://kb.vmware.com/s/article/2043160
Regards
Harry