Just FYI, Fedora does come with Firewalld enabled by default; however, the Workstation spin also has all non-privileged ports exposed by default. This really shouldn’t be a problem as long as your router has a firewall, your network isn’t already compromised, and you don’t plan to put the computer on the internet as a server; however, as part of my kickstart script, I close all ports just to be safe and only expose the ones I need for certain services.