Greetings, welcome to the Check Point Software 2018 first quarter financial results conference call. At this time, all participants are on a listen-only mode. A question and answer session will follow the formal presentation. If anyone should require operator assistance during the conference, please press star zero on your telephone keypad. As a reminder, this conference is being recorded. It is now my pleasure to introduce your host, Kip E. Meintzer, Head of Global Investor Relations. Thank you. You may begin.
Thank you, Donna. I'd like to thank all of you for joining us today to discuss Check Point's first quarter 2018 financial results. Joining me today on the call are Gil Shwed, Founder and CEO, along with our CFO and COO, Tal Payne. As a reminder, this call is webcast live on our website and is recorded for replay. To access the live webcast and replay information, please visit the company's website at checkpoint.com. For your convenience, the conference call replay will be available through May 2nd. If you'd like to reach us after the call, please contact investor relations by email at kip@checkpoint.com or by phone at +16506282040. Before we begin with management's presentation, I'd like to highlight the following. During the course of the presentation, Check Point representatives may make certain forward-looking statements.
These forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934 include, but are not limited to, statements related to Check Point's expectations regarding business, financial performance, and customers, the introduction of new products and programs and the success of those products and programs, the environment for security threats and trends in the market, our strategy and focus areas for 2018, demand for our solutions, and our business and financial outlook, including our guidance for Q2 2018 and full year 2018. Because these statements pertain to future events, they are subject to various risks and uncertainties. Actual results could differ materially from Check Point's current expectations and beliefs.
Factors that could cause or contribute to such differences are contained in Check Point's earnings press release issued on April 25th, 2018, which is available on our website, and other factors, risks, including those discussed in Check Point's annual report on Form 20-F for the year ended December 31st, 2016, which is on file with the Securities and Exchange Commission. Check Point assumes no obligation to update information concerning its expectations or beliefs except as required by law. In our press release, which has been posted on our website, we present GAAP and non-GAAP results along with the reconciliation of such results, as well as the reasons for our presentation of non-GAAP information. Now it's my pleasure to turn the call over to Tal Payne for a review of the financial results.
Thank you, Kip. Good morning and good afternoon to everyone joining us on the call today. Before I proceed further into the numbers, let me remind you that our GAAP financial results include stock-based compensation charges, amortization of acquired intangible assets, and acquisition-related expenses, as well as the related tax effects. Keep in mind that as applicable, non-GAAP information is presented excluding these items. Now let's take a look at the financial highlights for the quarter. Revenues for the quarter increased by 4% year-over-year to $452 million, in line with our projections. Products and security subscription revenues increased this quarter by 3% over the same quarter last year, reaching $245 million. Our security subscription revenues continue to be strong with 14% growth year-over-year, reaching $127 million. Our software update and maintenance revenues increased to $207 million, representing 5% growth year-over-year. Last quarter, we launched the Infinity Total Protection.
Our Infinity Total Protection solution offers the entire Check Point solutions in a simple financial model, price per user per year. We already closed few multi-year deals in several million, and we see a strong pipeline of the deals. The pipeline is from organizations from all geographies, verticals, and all sizes. From accounting perspective, as majority of Check Point solutions are offered as a security subscription, a small portion of the deals is and will be recognized as product while majority of the deal is recognized as recurring revenues over the life of the contract, some of it is subscription and some of it is support, update, and maintenance. Deferred revenues as of March 31st, 2018, reached $1,166 million, a growth of $103 million, or 10%, over March 31st, 2017.
Revenue distribution by geographies for the quarter was as follows: 47% of revenues came from the Americas, 36% of revenues came from Europe, and the remaining 17% came from Asia Pacific, Japan, Middle East, and Africa region. From a deal size perspective, this quarter we had 44 customers with transactions over $1 million. Transactions greater than $50,000 were 71% of total order value, similar to last year. Gross margin increased this quarter mainly as a result of changes in the mix of revenues and products. Non-GAAP operating margin for the quarter was strong at 53%. Effective non-GAAP tax rate for the quarter was 17%, similar to last year and in line with our expectations. GAAP net income for the first quarter of 2018 was $187 million, or $1.16 per diluted share, an increase of 7% from the first quarter of 2017.
Non-GAAP net income for the quarter was $210 million, or $1.30 per diluted share, an increase of 9% from the first quarter of 2017, and was at the top end of our guidance range. Our cash balances as of March 31st were $4 billion, compared to the $3.8 billion in December last year. Operating cash flow was very strong and showed an increase of 18% from $355 million last year to $419 million. During the quarter, we had a large tax refund relating to prior year for $45 million. Net of the tax refund, our cash flow from operations increased by 5%. We continued to implement our share buyback program during the quarter, and repurchased approximately 2.4 million shares for a total cost of approximately $249 million. Now, let's turn the call over to Gil for his comments.
Thank you, Tal. As you just heard from Tal, our results for the first quarter were good, with revenues at the midpoint of our projection and earnings per share at the top of our projection. We started the year with a new and unique strategy that aims to bring the world into the fifth generation of cyber protection. Before I elaborate on that, let's provide you with a little perspective. This past year has been quite significant for everyone in cyberspace. There has been a change in the cyber threat landscape, with attacks that are becoming increasingly sophisticated. These Gen V attacks are, in many cases, multi-vector attacks, polymorphic, and attackers are utilizing the most sophisticated attack tools.
While the level of attacks are at the fifth generation, we believe that the vast majority of enterprises are still using security tools that are somewhere between the second and third generation of cyber protections. Second-generation attacks are focused on penetrating the network, and we believe that our firewalls provide the best protection against these type of attacks. Third-generation attacks are focused on exploiting vulnerabilities in application inside the network and applications that are accessing or are accessible from the Internet. We lead the markets for integrated intrusion prevention in the network security infrastructure, which is the key element in Gen III security. However, fourth and fifth-generation attacks disguise themselves well in network traffic and especially in content file. Fifth-generation attacks add a multi-vector element, and in many cases can utilize cloud and mobile to deliver themselves into their target.
Bridging the gap between the third generation of attack and the fifth generation of attack isn't an easy task. Customers are investing heavily in many technologies and increasingly more vendors, yet our surveys indicate that only 3% believe that they are ready for the fifth generation. 97% are simply not there. This is a huge challenge and a tremendous opportunity. I believe that Check Point is uniquely positioned to close this gap. Check Point offers a broad solution that can address gen five cybersecurity challenges in an holistic way. Our solution are designed to prevent zero-day attacks across the traditional and new attack vectors, including cloud and mobile. Gen five architecture is focused not only on speed and feeds of the firewalling capabilities, but encompasses many other areas of security that have been developed in Check Point and are unique in the marketplace.
Real-time threat sharing, first-time prevention technologies, cloud security enforcement, and mobile threat prevention are a few examples. On top of that, to truly manage this type of security architecture, customer must have a unified security management platform, where Check Point has always been way ahead of the market. Some of the above may sound too technical for many of you, but just to illustrate the differences, most of our industry has been putting their focus on detecting different families of attacks. This is simply not enough. I believe that attacks can and should be prevented, and we are demonstrating it every day at Check Point. We introduced the gen five strategy in the first quarter at our Check Point Experience 360 Conferences in Europe, U.S., and Asia. We had record attendance and the highest level of customer ratings for our conference and strategy in our history.
Seems that our message of addressing the fifth generation of cyber threat is well received by our target audiences. In every discussion that I have with Chief Information Security Officers and with key IT leaders, they all agree that their challenges are at Gen V, yet their staff is still focused on managing their Gen II and Gen 3 technologies. Empowering customers to make this big step forward is a great privilege, but not a simple task. In the first quarter, we already delivered a few wins where customer purchased a full Gen V security solution using our Infinity Total Protection security offerings. This deal demonstrated how the conversation is shifting from transactional product purchases into strategic security architecture, which carry more value. A value that's recognized financially over a longer period, given that these deals are all based on annuity models.
We continue to enhance the cloud capabilities of our Infinity architecture. We launched the CloudGuard family of products addressing both infrastructure cloud security and Software as a Service or SaaS security. In the area of cloud security for the infrastructure, we saw a very high percentage increase in sales this past quarter. This quarter, we will start shipping our CloudGuard SaaS technologies. To execute on Infinity and CloudGuard, we invest not only in research and development, we also continue to refine our go-to market strategy. Key elements that we are making changes is a focus on being much more proactive in approaching new customers and in reaching higher level in our customers' organizations. The CISOs, CIOs, and others have the ability to see the bigger picture and update their overall security architecture to fifth-generation protection. We've elevated the level of our marketing activities and will continue to do so.
The task of changing the behavior of our productive sales force takes time. We're asking them to learn new sales techniques, reach much higher in the organization, and learn new tactics in approaching new customers and opportunities. At the same time, we continue to hire new salespeople to augment our coverage where needed. This quarter, we already saw some early successes of the new changes and the Gen V initiatives. For example, a financial customer attended the CPX conference in February, saw the Gen V and Infinity Total Protection, returned home and said, "That's what I want." Within a month, it resulted in a five-year multimillion-dollar deal. We have other early success in the Infinity space in multiple customer segments and geographies, U.S., Europe, and Asia Pacific. These early successes demonstrate the huge potential ahead of us.
With the positives of these early successes, there are also some other implications. Changing sales execution takes longer than what I'd like. While these deals are much bigger than a typical product deal, they take longer to show as they come in as annuity. In other cases, they can lead to longer sales cycles. While I'm pleased with the first quarter revenues and EPS, our overall sales are softer than what I would have hoped to see. It will also slightly reduce our projection for the remainder of the year. With that, I would like to provide my projection for the second quarter and update some of the full-year numbers. As you know, my usual caveat, predicting the future will always carry a high level of uncertainty. There is risks and there is potential upside. With that in mind, I'd like to share some of the numbers.
For the second quarter, revenues are expected to be in the range of $445 million to $475 million, and non-GAAP EPS in the range of $1.25 to $1.35. GAAP EPS is expected to be approximately $0.15 lower. For the full year, I'd also like to update our projections by approximately 2%-3% to reflect the changes we are making. Full-year revenues are expected to be between $1.85 billion and $1.93 billion. Non-GAAP EPS in the range of $5.45 to $5.75. GAAP EPS is expected to be approximately $0.62 lower. With that, I'd like to open the call for your insightful question, and looking forward for your great feedback on our strategy.
Thank you. The floor is now open for questions. If you would like to ask a question, please press star one on your telephone keypad at this time. A confirmation tone will indicate your line is in the question queue. You may press star two if you would like to remove your question from the queue. For participants using speaker equipment, it may be necessary to pick up your handset before pressing the star keys. In the interest of time, we do ask that you limit yourself to one question and one follow-up. Our first question is coming from Jonathan Ho of William Blair. Please go ahead.
Hi. Good morning. Just wanted to maybe start out with some of the sales execution challenges. Can you maybe talk about where we are in that process? Maybe what's worked, what's continued to be challenging, and maybe the timeframe that you see for that to be corrected at this point.
I think there are many things that we're doing, it's not one thing that we're doing, and it simply takes time. Again, as I said, a little bit more than I would hoped it to change. There are some things like we appointed, we promoted a new sales leader for our U.S. organization, but the main issue is really about teaching our salespeople how to approach higher in the organization, how to reach the C-level, how to go to cross-department and cross-projects. Again, our people have great relationship and great success. We've usually, with the network security people within the organization, we really need to expand that. Again, especially for a very productive sales force like we have, it's hard to adopt to this challenge. When we talk about Infinity, again, if in the past it was, here's a product, take the product, maybe check its performance.
I think one of the most successful sales strategies that we have is doing what we call checkup report. We come to a customer, we analyze their network, we give them a report. We've seen tremendous success on that. It can be in a small organization. It can be in some of the largest banks in the world. When we carry that checkup situation, almost always they result in them adopting a broader strategy and understanding the superiority of the Check Point technology. We've kicked, by the way, many competitive products when they saw that their network is unprotected with this checkup report. These are all things that we're making and changing, and they simply take time.
Got it. Then just with regard to Infinity Total Protection, can you maybe give us a sense of what the impact has been on product revenue versus subscription? I know it's relatively early days, but there's clearly some shifts that are going to happen between those lines. Can you give us a little bit more color in terms of maybe what's happening with that?
Sure. Like I said, it was very early, but we had already a few deals, and when I'm looking forward, it's obvious that there is a shift that you experience, just like when we historically sold IPS as a product, and then we moved into the subscription. I'll just give you an example. If you typically sell appliances and all of it is in the product line, and then you might have a touch of subscription, which might be, depends on the package, but it can be, let's say, 15%-30% of that value, and then you have update and maintenance, let's say 20%. In a typical Infinity deal, the product portion is going to be significantly lower of that pie. Probably around 80% is going to the subscription and support portion, and around 20% will go to the product line. It's quite a significant shift.
Thank you.
Thank you. Our next question is coming from Saket Kalia of Barclays. Please go ahead.
Hey, good morning, guys, and thanks for taking my questions here. First, maybe for you, Gil, clearly, nice early success on Infinity Total Protection. You've talked a little bit about kind of how it attacks or handles Gen V attacks. In your conversations with customers, how are they responding to sort of the very different pricing model with the chance for more usage?
I think the pricing model, they actually like. The challenge is not there. The pricing model, they like because it makes their life simple, because it's a predictable model. I think it's very fair model. The deals that we closed were all at the price that we came up with. There wasn't much price pressure there on that. I think from that perspective, it's going very well. The bigger challenge is actually to get them to consolidate their view. Today, customers are, especially large customers, are looking at these technologies in many different silos, in different places, in different organizations, and it's really hard for them to see how to consolidate, to take the bigger picture and to take that bigger view. I think that's one of the sales challenges that we have, and not just about Infinity, by the way.
It's, in general, selling a more architectural sale.
That makes sense. For my follow-up, maybe for you, Tal, just thinking about the kind of historical subscription packages that we've sold. We're a couple of quarters now past the anniversary date for that big pricing change you made last time. Can you just talk about qualitatively how renewal rates have trended on subscription packages over the last couple of quarters?
Remember, I was telling you they're moving between packages. That's why we don't provide it. In general, renewal rates are pretty steady. The install base is steady, the renewal rate is steady. It's the challenge to move up into the levels and sell additional solutions. If historically, in our offers, if a customer had next generation firewall, you moved him and offered him a higher value with Next Generation Threat Prevention. Then we bundle the Next Generation Threat Prevention, and the upsell was to move into Next Generation Threat Extraction, which is the advanced threat protection. Now you have to go all the way up to Infinity and sell him the entire total solutions in one price to be implemented all around the organization. That will be majority of it in those subscription and update and maintenance lines.
Got it. Thanks very much.
Thank you. Our next question is coming from Sterling Auty of J.P. Morgan. Please go ahead.
Yeah, thanks. Hi, guys. Just curious, you talk about sales execution, what were win rates like during the quarter on a competitive? How are you sure that it's not a technology and a competitive issue?
I think the competitive win rates were the same. We had many cases when we kicked out competitors from accounts all over the world. As I mentioned with our checkup report, we've seen cases, even again, in the most sophisticated and largest accounts in the world, not just accounts that have limited stuffs on them. Some huge banks, we saw deals when we did the checkup report, and they were shocked to see how many malware they have on their network that penetrated what they were thinking is a good security solution. Again, we started, especially in the very large one, we started the early process of replacing them. I don't think that our issue today is in technology, quite the contrary. Again, if you remember last quarter, there was the NSS report, which shows the breach prevention system report.
The first NSS test that we did that actually really tested advanced threats and the ability to prevent them. We scored a clean 100% ratio on that, we were, by the way, the only vendor that even got to this test with a single gateway and not with a host of five or six different technologies. If we would add to that, by the way, our other systems, we would keep the 100%, again, it can't be get any better, that's, by the way, we got to the test with the simplest system out of all vendors and still got the highest rank. I'm pretty sure about the capabilities of our technology.
Got it. Then as the follow-up, with the promotion for the head of sales in North America, is there additional changes that you feel that need to be made underneath, it's more just a training and experience issue at this point?
I think we will keep making changes. I think there's a lot of places that we have to build and we have to change, and especially augment where we are. We are hiring, especially in the Americas. We have a lot of open positions, and we encourage our salespeople to add the people in the right places. I think we will add people all over the place, both at the top and then the people that actually doing the work. Thank you.
Thank you. Our next question is coming from Shaul Eyal of Oppenheimer. Please go ahead.
Thank you. Good afternoon, guys. Maybe building on Sterling's prior question. Gil, on the sales and marketing front, I think all of us taking United Airlines flights over the course of the past few weeks have seen the Check Point commercials, but as it relates to sales force hiring, can you maybe quantify for us how many salespeople were added during the first quarter? Maybe the second question in that respect, a very competitive landscape right now, both in Israel and without a doubt, you mentioned the U.S. How can Check Point draw top talent? When you draw talent, where are you bringing this talent from?
I don't have in front of me the number of people we hired and so on. I think it is a nice number. As I said, we have many open headcounts, so we can still hire more, especially in the U.S. In terms of drawing talent, again, it is a competitive market. It is hard to recruit people. I think we're able to do that. It's very, very different when you speak about the sales force in the U.S. or in the rest of the world. By the way, U.S., rest of the world, and Israel are very, very different. In most countries, I think Check Point is quite an attractive leading vendor for new people to join in most European countries, in Asia, and so on. I think there we can attract very, very good talent.
In the U.S., I think we're also a very attractive vendor in the cybersecurity space. By the way, we see that. We see that people that left Check Point two, three years ago to move to other vendors in the security space, sometimes even to our competitors. There aren't, by the way, many people that leave us for competitors. Even some of these people are asking to come back, and some did come back. Some we did recruit back. I think what they all quote is not just the work atmosphere, but the fact that they like to work with the best technology, and they like to stand in front of the customer knowing that what they sell is a credible story with the leading technology. In Israel, it's quite different because first, we try to get developers, researchers, and so on.
The market here is competitive, but here I think we're definitely considered one of the most prominent companies that people want to come and learn and grow in. In Israel, we mainly recruit people in the early stage, not even early stage of their career, before they start their career. Most of the people we recruit are during their second and third years in university. They become interns and then during their university studies, and when they graduate, we can pick the best one to stay here. I can give you one excellent example of a program that's really unique that we've done last year. We call it the Check Point Security Academy. We trained really the top talent of security researchers. Usually, most companies are looking for people with prior experience in that, and there aren't that many people that have prior experience from that.
We understood that at the macro level, there's a limit of how many we can try and recruit, and we simply created our own program. We got the first round of people in that program, and they are amazing. One of the graduates of that program, that again, came with no prior experience, fresh out of the program within a month, found one of the most significant vulnerabilities in Microsoft Office, for example. We have some very, very nice wins in that.
Thank you.
Operator.
Our next question is coming from Gregg Moskowitz of Cowen. Please go ahead.
Okay. Thank you very much, hi, guys. Question, Tal, just on software updates and maintenance, because the revenue did decline by 2% sequentially, and by our estimates, that does represent the biggest sequential decline that we've seen in the last decade or so. It sounds like you're not seeing any change in win rates, but with that being the case, does this reflect any change in pricing on maintenance contracts, or is there some other factor that you would attribute it to?
Typically, between Q4 and Q1, there's a reduction. It depends how much. You don't have only update and maintenance, the recurring. You also have there training, you have installations, you have professional services. Sometimes you have more in Q4 as a result of implementation of large projects. It's nothing dramatic, no.
Okay. Thank you. Just getting back, Gil, briefly to the go-to-market changes that you've discussed on this call and previously, do you guys have a line of sight into when things will be back on track? You talked about the architectural sale that Infinity entailed, and obviously that has a lot of promise, but it does also introduce more complexity. I'm just kind of curious when you sort of think you may get to that point of returning to better execution.
I think we will see changes. We will see some effect already this quarter and some improvement compared to some of the internal metrics that we have over the first quarter. Even in the first quarter, we saw improvement in some metrics that we are starting to track and starting to work on. The overall impact on the revenues, I think it can take time because we're talking here really about different phenomena that it's hard for us to estimate. Like large deals, I really like us to penetrate more strategic large deals. These deals, by definition, are a very long sales cycle. If we win them, it will take time. If we don't win them, I don't consider that even an option. Let's put it that way.
Small deals that are more architectural and so on with smaller customers, these deals can come faster in some cases, but their overall impact It's hard to mitigate. Again, if we talk about these architectural deals, the revenue recognition would cause the revenues to come a little bit later. It's a little bit hard to predict that. Yet, I'm very optimistic about what we have and the acceptance of the new messages that we have in the marketplace.
Okay, great. Thank you very much.
Thank you. Our next question is coming from Andrew Nowinski of Piper Jaffray. Please go ahead.
All right, thanks a lot, guys. Maybe just starting with a clarification. You look like product and license sales declined about 6.5% year-over-year, which sounds like it's just due to that mix shift from the Infinity program. I guess in light of your lowered annual outlook, are you still expecting product and license growth, in the second half of 2018, or is that no longer on the table?
I think if you look at the guidance, you will see that in our mid-point, it doesn't assume that. I just want to clarify, there's two things. It's not that the Infinity takes longer to recognize it as revenues, which is obviously a significant effect, but what Gil was relating to is also the length of the time it takes to close such deals on architecture, moving up in the hierarchy in the large organizations, getting the right people in order to get the big picture and purchase an Infinity. While we see a very nice pipeline, we estimate it to take longer to close it.
On the one hand, it delays product refreshes because now you can get into the Infinity, so you see an effect on the product revenues. Then it takes the time, A, to close the deal, and B, once you close it, to recognize it into the revenues.
All right. Thanks. Last quarter you had talked about making progress winning new customers, but we're not really seeing that showing up in billings, which were flat again, despite even a higher duration. I guess is Infinity driving any new customer growth? Are you seeing Infinity driving really more sales to your existing customer base?
Maybe just because we started with the accounting, I didn't discuss it at all, but I can just say, note that Infinity is paid over annually, which means you won't even see it in the deferred revenues unless it's a customer that decided to pay everything up front. Just take that also into consideration.
All right, thank you.
In terms of customers, we have a mix of both existing and new. I think it's a potential for both, and we're working on both opportunities. I can give you one example of a customer that we won, where we actually replaced five vendors with the Infinity solution, and that's a great solution. We did win over some of our key prominent competitors in that deal, and again, kicked out of the account, five other vendors. The solution is really comprehensive.
Thank you. Our next question is coming from Anne Meisner of Susquehanna Financial Group. Please go ahead.
Hi, everyone. Thanks for taking my question. I just wanted to dig into the subscription growth deceleration a little bit more that's beyond what we've been modeling for deceleration. This is maybe a bit of a follow-up to Saket's question, but is there any further color you can provide on pricing of the subscription bundle renewals? You did say the renewal rates were good, but maybe there's some pricing going on there. Any commentary you can provide on subscription attach rates on new business?
Sure. I just remind that when we discussed it last quarter, I said to expect some deceleration in the subscription as a result of the acceleration last year. Some of it was relating to bundling in 2016 of the NGTP into the appliances, which created a pressure on the product, but then acceleration in the subscription over close to the entire year last year, which means this year you see some of the deceleration back to normal rates.
Okay, great. Quick follow-up. Considering your strong cash balance, strong cash flow still, and you're kind of going through a bit of a sluggish period for sales, any thoughts, I guess, on just increasing your stock repurchase beyond the $1 billion per year that you've been doing?
It's something that we can consider. It's an option. Again, I don't even have a strong position for or against. What we usually do, by the way, on these things, of course, it's a board decision and a board decides that, and usually we collect feedback from shareholders before we make major decisions in that space.
As you said, typically once the old program is coming out to an end, then we have a discussion, we bring all the data, and based on that, make a decision.
Okay, perfect. Thank you very much.
Thank you. Our next question is coming from Ken Talanian of Evercore ISI. Please go ahead.
Hi, guys. Thanks for taking the question. I was wondering if you could frame how your renewal pipeline compares for the remainder of the year versus this time last year.
Wow. Should be the same, slightly up, since our subscription is the same and slightly up versus last year.
Our install base is a little bit bigger, and therefore-
Exactly. It's already bigger, the opportunity should be slightly higher. In that area, I would say not much drama, right? It can fluctuate between quarters, just depends on long-term contracts. When you talk about the regular potential regard, if you put aside multi-years, it's pretty much the same.
I guess as a follow-up, do you expect there to be more or less multi-year deals than you've seen over the past year?
Really hard to predict. I'm not driving it into big multi-year deals. It's always a struggle with the sales force that in many cases wants to make these multi-year deals. I'm actually not pushing for that because I think there's no reason to sacrifice future revenues and give higher discounts for that. Again, it varies, and if somebody comes up with a great proposal, then, of course, we accept the booking.
Great. Thank you very much.
Thank you. Our next question is coming from Philip Winslow of Wells Fargo. Please go ahead.
Hey, guys. Thanks for taking my question. Just to continue on Check Point Infinity. Obviously, it's a big change, not only from a technology platform perspective, but just pricing and packaging, not just for you guys, but really relative to the industry. Curious just what you're seeing competitively, the response being from the others in the market to Check Point Infinity, whether it be pricing, promotion, just any sort of competitive response that you're seeing would be great.
I think there are some responses. I'm not that familiar with the details, but I think realistically they can't do that because they don't have the full architecture, or a competitor don't have the management to manage a holistic security. Most of our competitors don't even have the management to manage just the network security as one unit. They don't have the mobility portion of that. They lack on the cloud and definitely on the cloud, the SaaS part of application. The overall message of let's bring you to Gen V and do full prevention, none of our competitors does full prevention at this point. Again, people hardly miss that because they take benchmarks on bits and pieces of the technology capabilities. To do first time prevention, that's really unique to us.
Got it. Thanks, guys.
Thank you. Our next question is coming from John DiFucci of Jefferies. Please go ahead.
Hi, this is Julian Serafini on for John. Big picture question, I guess, for Gil. You talked about multi-vector attacks, and I'm thinking about the endpoint in particular. I know some of your competitors are pushing more into the endpoint. I know Check Point offers the SandBlast solution on endpoint, but realistically, Check Point hasn't been considered a large endpoint player. I guess, how do you consider that market? Is it a market that interests you more, that you would push into more in the future? How do you think about it?
Very good question. I apologize, by the way, for the noise. It started an amazing rain here, which is very untypical for Tel Aviv in the spring. I think first, we do have excellent endpoint suite that we can put on customer networks, and I think it's very integrated. It has all the capabilities, and especially on the advanced. I mean, the basic features of an endpoint like antivirus and so on, we have an excellent package, much better than our direct competitors in the network security space, and we have the best AV engines and so on. On the advanced capabilities, we really have very unique capabilities on that.
At the end, the real big story, I think this is very good for the security story and the architecture, but I don't think that most customers would replace their existing endpoint suite from Symantec, McAfee, and many of the other endpoint vendors that are out there. Again, I think that the impact we can have, we, I mean, not just saying Check Point. All the network security companies can have on the endpoint is very limited. It's very hard to replace a full endpoint suite. What we can do is augment that with the advanced technologies. There, I think we have a lot to offer from our advanced SandBlast Agent and the advanced capabilities to the browser extension that we have, which is a very, again, unique to us, a browser extension that checks all the downloads that you are doing on your web browser.
Okay. Thank you.
Thank you. Our next question is coming from Walter Pritchard of Citi. Please go ahead.
Hey. A question for Gil, just on sales and marketing. I'm wondering if you think from a multi-year perspective, given the industry remains pretty competitive, do you expect to have to increase sales and marketing as a percentage of revenues as we go out, not necessarily this year, but in out years? It just seems like the industry has kind of not let up in its spending. I'm wondering if you have to respond in that way.
I think we will increase slightly the sales and marketing expense, I think overall, the issue is not just increasing the spend. The issue is doing it smartly. Now this year, yes, we're doing two, three times more marketing activities. When I'm talking about increasing marketing activities, it's really high %. You can see that the impact on the financial is hard to spot. Can we do more? Yes. Will we do more? Probably yes. If we will do more, I also expect revenues to come in return to that.
Great. Tal, you referenced mix shift in gross margins. Can you talk about mix shift in product and especially address what you're seeing on the Virtual Series, which is all software?
Yes. No, what I meant is if you see, you see our gross margin slightly moved up. I always say, the gross margin can move up 1% or move down 1%, depends on the product mix. This quarter, when you look at the product was lower and the growth came from subscription. Subscription came higher margin, hence the improvement on the margin. On the vSEC, it's a software. You understand that anything that has to do with virtual, software, subscription, mobile, anything that is a software in the gross margin is like
98% margin, while the cost is actually in the R&D expenses.
Thank you. Our next question is coming from Brad Zelnick of Credit Suisse. Please go ahead.
Good morning. It's actually Will Lunn on behalf of Brad. Thanks very much for taking our question. I wanted to ask, when we think about segmentation of the business in terms of low, medium, and high end, so I guess branch, SMB, enterprise, and then data center, it would be really interesting to know where you're seeing the most momentum and perhaps any color you can share around discounting trends within those buckets. Thank you.
I think that it varies every quarter. There's no direct pattern. Right now, we see strength in the low end, in the mid side and in the super high end. Where when I see softness is actually in the sort of large product, but not the super high end. The super high end, we see that. In the cloud space, we see a big strength. We've seen very nice growth on the cloud sales, the infrastructure cloud sales, and that's a trend that continues now for more than a year.
Thank you very much.
Just to give you guys some insight on the noise you're hearing, this is golf ball-sized hail, something that doesn't happen in Tel Aviv. Very, very rarely, I think, is the way to look at it. We apologize for the sound, but proceed with the questions.
Thank you. Our next question is coming from Keith Weiss of Morgan Stanley. Please go ahead.
Excellent. Thank you for the question. Gil, congratulations on that Israel Prize. That's definitely a big honor and really a testament to what you guys at Check Point have done in the overall security industry. My question was kind of along the lines of that, the investment bent. With the changes that are going on with the sales organization, we did see sales and marketing expense up like 11% this quarter. Should we expect that investment to continue, or do sort of the new leaders have to come into place and sort of get their efforts into place, before you sort of hire on additional kind of resources under them?
Sorry, with the noise here, it's very hard for me to hear. Can you repeat the last part of the question?
The general gist of the question was, with changes in sales leadership going on in the Americas, do you have to pause the investment in the Americas while you're making those changes, or does the investment continue with the new leadership?
No, we actually need to accelerate what we're doing. The new leader that we promoted, she's been a Check Point veteran for many years, so she knows our market, she knows our people. She's an internal promotion, which is always better, and I think she will push all the people inside to ramp up to where they need to be.
Got it. On the cloud side of the equation, in the press release, you talked a lot about CloudGuard and the sort of ability to protect those cloud-based environments. Can you talk to a little bit about sort of virtual firewalls and sort of the adoption you're seeing of those virtual firewalls in cloud-based environments? Has that started to pick up? Is it becoming a more significant part of your business today?
It is a small part, it did ramp up significantly, almost doubled this quarter. Take into consideration that this is also sold today mostly as an annuity model. In the past, people purchased software firewall as a one-time forever price, basically. Now, with the cloud, this is actually also moving into annuity pricing, which in the long run is good. In the short run, you see again a shift from the product revenue to the subscription revenue.
Got it. Excellent. Thank you very much, guys.
Thank you. Our next question is coming from Fatima Boolani of UBS. Please go ahead.
Good morning. Thank you for taking the question. Tal, a question for you, just want to better understand the sequential decline in subscription revenue. I can appreciate some of the changes that are happening on the product side, which you characterized kind of being dehydrated. Subscription revenues being down sequentially is the first time I'm seeing that since you started breaking it out. Can you help me better understand what the driver would be for that to happen and what the trajectories for growth for the subscription line looks like for the rest of the year?
Sure. When we talked about the guidance in the beginning of the year, I said we expect it to go back to the levels of 13, 14, 16%. It's actually quite expected. I think that the process of subscription is built in layers. When we moved from NGFW to NGTP, it created an uplift, an acceleration. The way we do it, we put it as a bundle, and then the next year it's renew, and you enjoy a very nice growth. We move add solutions. We move to advanced threat protection. We added NGTP, and then we added NGTX. The first year of the bundling, it created pressure on the product, and a year after, you see a very nice accelerated growth.
This year, Infinity is that next phase, meaning now we see people, but Infinity is not bundled. Remember that. Actually, Infinity, you need to introduce to the market. The more Infinity transactions you will have, you will see more pressure on the product, but three, four quarters later, Well, second quarter later, you will start to see revenue recognition and again, acceleration in the subscription line. The more you succeed, the first year you see a pressure on the product, and the second year, you start to see an acceleration on the subscription. That's what we were relating to, and that's also part of the effect of the Infinity, the cycle of closing the deals. Once you close it, you will see it over time in the revenue.
That's helpful. Maybe a question for Gil. I know you've spent sort of a lot of time talking through the sales cycle elongation associated with Infinity and some of the go-to-market changes you're making to empower your salespeople around Infinity. Can you speak to the efforts you have around your partner community and your channel community, and what sort of investments are going in that distribution avenue to help with Infinity and improving the sales velocity there? That's it for me. Thank you.
First, our partners are very, very important in that cycle. When I talk about our CPX 360 conference, for example, that's the perfect example. This is the first time we're doing that conference as a joint conference for all our sales force, all our partners, and our customers. This is why these conferences became very, very big. For the first time, by the way, that's why, by the way, we moved from the second quarter to the first quarter because we combined that with our sales kickoff meetings. I think overall, we need to do more and work more with our partners to explore that opportunity to get to them. By the way, still 100% of our business is fulfilled and is done jointly with the partners. Our business remains 100% joint business with the partners.
Absolutely, yes, we need to invest more in doing it with partners. There are some, by the way, large, nice opportunities around that, like working better with large system integrators to give the customer a fully integrated approach for security. In many cases, the system integrator, not just the local resellers, can help us address that. There is plenty of opportunities with our channels and resellers at all levels that can promote this value.
Thank you. Our next question is coming from Matthew Hedberg of RBC Capital Markets. Please go ahead.
Hey, guys. Thanks for taking my questions. Maybe a first one, with your exposure to Europe, I'm curious, with GDPR going live next month, is that impacting sales at all? I mean, are you seeing a positive benefit there? Is it coming up in customer conversation? Just sort of curious, any other color there?
I think GDPR definitely raises the conversation. It's a good way to speak to some executive in the marketplace. So far, I haven't seen a big impact on sales. Again, it's a way to bring people to our activities, to do seminars, to educate people. People are very interested. We have some material and white papers and so on about GDPR and what you should do in terms of security to comply to that. By the way, I think that we have plenty of technologies in our products and technology that can help customers in the things in the spaces of data leak prevention and the document security and encryption and so on that are really, really helpful for customers if they need to comply to GDPR regulation.
That's great. Maybe a quick one, as somebody asked earlier about the potential for increased buyback. I'm curious, I believe you have about $4 billion in cash. Thoughts on incremental M&A at this point? Obviously, you're spending more on sales and marketing, but curious on sort of R&D and/or M&A. How do you kind of think about that?
We continue to look for attractive companies for acquisition. I think we really look for unique breakthrough technologies, it's not that easy to find, especially because I'm very, very confident about the technology and innovation that comes from within Check Point so far. There are some promising ideas and promising things outside, I think we're trying to look at them at more intensity.
Great. Thanks, Gil.
Thank you. Our next question is coming from Karl Keirstead of Deutsche Bank. Please go ahead.
Oh, thank you, Tal. Apologize if this has been asked, I dropped for a second. On the last earnings call, you mentioned that you had a high-level target to hit $1 billion in operating cash flow in 2018. Just in light of the investments that you and Gil have discussed, are you still comfortable with that or no?
In general, I don't expect changes there, right? In general, anything can happen, but when you look at it's pretty much in line with what we see in the operating income with a delay of a quarter, right? In general, taking into account the operating cash flow. We should be, I think it can be slightly more, slightly less, but yes, I feel comfortable at this point of time with around $1 billion, yeah.
Okay. Thank you.
All right, guys. That was our last question. Thanks for working through the adversity with the hail with us today, and we look forward to speaking to all of you throughout the quarter. We'll look for your calls coming in later today. Thanks. Have a great day.
Ladies and gentlemen, thank you for your participation. This concludes today's conference. You may disconnect your lines at this time, and have a wonderful day.