You can use a territory ACL to require permissions for a Broker to join and participate in a territory, and a gateway ACL to control whether Broker data is allowed to flow from a connected territory across a gateway. For more information, see Territory ACLs and Territory Gateway ACLs.