Just create a standard interface ACL to block what you want and apply it in the appropriate direction....just make sure you also allow exactly what you want and not get hurt by the implicit deny any any.
blocking udp 135-139 should do it.
perhaps if you told us what your vpn device is, that might make it easier to recommend a solution.
