You can prevent scanning of foreign computers by only scanning with Active Scanning (detailed description can be found
here) and/or Scheduled computer scanning (detailed description
here). Under
Configuration\Scanning methods, section
IP Address Range scanning, hit "No Windows" for all of your IP ranges and in section
Workgroup Scanning do not enable Workgroup scanning.