Firewall and selinux question

[nagiostra]

Our XI host (XI 5.9 on CentOS 7) is plugged into a switch which is plugged into a Palo Alto firewall device. It seems redundant to be running a firewall on the OS. Can someone tell me how to turn it off? Also, we don’t require SELINUX and it drives me nuts. What’s the risk in turning that off and how would I do that?

[gormank]

I guess this is a general linux support page now...

grep ^SELINUX= /etc/selinux/config
SELINUX=enforcing

systemctl stop firewalld
systemctl disable firewalld