Some SEPM clients show firewall status disabled by policy, others as not installeds

What is the difference between "Disabled by Policy" and "Not Installed" for the Firewall status? The SEPM console shows 4 of 18 servers with the Firewall "Not Installed" and the others as "Disabled by Policy" and our auditors are questioning this difference and want them all the same.