One of my clients did a vulnerability scan of the new Cisco ISE 2.2 and found out two strange ports 9102 and 9103.

Nmap scan results

After some research I find that those ports are related to ISE Wireless Setup.

CLI output on the admin ISE node

How to disable?
1. In ISE admin CLI, issue application configure ise
2. Select option [17]Enable/Disable Wifi Setup)

Note: If you have ISE 2.2 Patch 1 the ports will reappear after 15-20 seconds and will not be able to disable them permanently. This behaviour is fixed in ISE 2.2 Patch 2.