Do we completely Off the Firewall on Server and Clients in SEP Deployment?

hi

Do we completely Off the Firewall on Server and Clients in SEP Deployment?

using sep 12.1.5 

server win 2008 r2

clients win7 and linux machines

do we completely off all firewalls of all servers and clients?

if not then how to manage firewall on windows and clients