Only if you have the newer Cloud Key or Dream Machine. The older Cloud Key isn't fast enough to handle the new OS (which ended up being good in this case, since it's still getting security updates).
I have not looked at Protect yet, however for Network you can disable remote login after creating a local account. Open Network app on IOS and make sure you go the main page that list the controllers. Click on the arrow. Next screen you will see a section called “Launch Type” which list all the access methods, local IP 4, IPv6 and cloud. Pick the local IP adresss.