This document provides the port usage for the various McAfee SIEM appliances. This document provides this in tabular and graphic versions.
Just great Document but it has to be modified to reflect scenarios where there is Distributed ESM.
Ports for DESM : ssh(22), SSL(443)
Also there is missing port 88 for Active Directory Authentication.