One of my clients did a vulnerability scan of the new Cisco ISE 2.2 and found out two strange ports
After some research I find that those ports are related to ISE Wireless Setup.
How to disable?
1. In ISE admin CLI, issue
application configure ise
2. Select option
Enable/Disable Wifi Setup)
Note: If you have ISE 2.2 Patch 1 the ports will reappear after 15-20 seconds and will not be able to disable them permanently. This behaviour is fixed in ISE 2.2 Patch 2.