It has been too long since I last used MOA, sadly, I have forgotten too much. In particular, I had forgotten if there was a way in which only VMs, not MOA itself, can access any given network.
Perhaps I should clarify:
MOA by itself is deemed vulnerable and considered unusual by any network scanner. I simply seek to isolate MOA from network access. Basically to prevent the MOA operating system from sending packets over any interface except VMware’s virtual interfaces. Only to allow VMs to send packets over any interfaces so that it would seem as if only a VM connected to a network.