So many people turn off default security features! (Score 1)

Fedora, Red Hat Enterprise Linux, and CentOS come with a reasonable Net Filter (iptables) configuration by default that allows the necessary operations. It can be easily configured to allow extra ports, trusted interfaces, etc. It often gets turned off because it's supposedly too hard.

Fedora, RHEL, and CentOS also come with SE Linux enabled by default, it gets turned off more often than Net Filter.

I find it difficult to believe that any significant portion of IT budget goes to security when I see so many people turning off things that are free and relatively easy to use.