Just to elaborate a bit, to disable the port entirely on a NAC/management server 20203/tcp, you would need to edit:
%installdir%\webapps\datamanagement\WEB-INF\distributed.properties
Make sure the following 2 lines are changed to reflect:
jmx.web.console.enabled=false
jmx.web.console.port=0
Save, restart NAC, port 20203 should no longer be exposed or accessible.
The same applies to a standalone execution server, you would just need to instead make the same changes above to:
%installdir%\webapps\execution\WEB-INF\distributed.properties
Then save, restart NES.
As for the agent(s) w/JMX exposed on port 8282, as I mentioned previously simply edit:
%agentdir%\conf\nolio.jmx.properties
with these 2 lines updated:
DeployerJmxPort=0
DeployerJmxEnabled=false
Let me know if this helps, thanks.
Jeremy