LAN------------>Mikrotik--------------->Internet

How I can disable the ssh access to mikrotik router from public interface.

thanks

Either adjust the listening ACL under IP services, or write a firewall filter that drops SSH in the input chain for packets that come into the router via the WAN interface.