I built a new simp server from a 6.4 ISO built on Oct 20, 2020. The server started iptables instaead of firewalld. Clients I kickstarted started firewalld.
It seems we have something out there that is stopping firewalld on the simp server probably during boot strap.
A new el7 system should start up in firewalld.
For the EL7 ISO, I think we should include the firewall packages in the list of common RPMs installed by the ISO. (We still have to include the iptables RPMs because we are using iptables as the firewalld backend due to bugs in firewalld). I haven't tested to see if this solves the problem of the SIMP server coming up just in iptables mode.
Disregard the previous comment. Also, see discussion in
This is a duplicate of