Do we still need to look at host based firewall if we are using Palo Alto?

Noted in the CIS Benchmark for CentOS that there's a portion on firewall configuration. As the main focus for host based firewall, do we still need them if we are using Palo Alto firewall? It seems like double work to configure for host based since there is limited defence barrier compared to Network firewalls?