Resolution
You cannot change the web access port from 2002 to any other port.
Once you are connected at port 2002, it randomly changes from the range between 1024 to 65535, but the ACS always listens at 2002.
Also, one TCP/IP port is required per administrative session.
For more information, refer to the Accessing the HTML Interface section of User Guide for Cisco Secure ACS Solution Engine Version 3.3 - Overview.