From some Snowflake that, things are slowing down. We've seen SentinelOne, we've seen CrowdStrike, that had some negative comments. Some companies are reporting great numbers, some companies are reporting some weaknesses. How do you think is the environment? What do you see in the environment, number one? What are the components of your success? Meaning, you grew products 35%, you grew the services 30%. What are the components of this success?
Yeah, I'll talk about just the numbers for modeling a little bit. John can give a lot more color on it, I think. You know, I think that, you know, we've shown the ability to be a consolidator, both in terms of market share as well as product offerings. That's given us an advantage in the current environment. As you look at Q1 specifically, I would add to that, as we've communicated previously, that, you know, we saw some drawdown of the backlog that provided some tailwind to it as well. I think we saw a healthy degree of competitive displacement and opportunities. I think, you know, in a bit of a surprise, I think the SMB held up very well in the Q1 . Europe held up very well in the Q1.
I think when you look at those types of data points, what that really to me is affirmation that cybersecurity is not a discretionary spending item. It's a must-have, and it doesn't matter what's happening in terms of the country next door being at war or what industry you're in, or what have you. You are a candidate for attacks like ransomware, and as such, you know, are in the position that you need to continue to invest to secure your own architecture and your own network. Maybe John can give a little more on market dynamics.
Yeah, and it's all about having the right products and services. I mean, the marketplace, we see by 2026, it's a $280 billion marketplace. We break that into what we call secure networking, cybersecurity, and OT security, operational technology security, and it's about having the right portfolio inside there. Secure networking, for example, where we've built things together, like SD-WAN and firewalling, and now SASE as we go forward. Having the ability to combine those into a platform allows us to go and consolidate into the marketplace. It's definitely making sure that you make the right bets in the right markets, but the market's big enough, it's just a question of making sure you're going in the right direction.
The question is, there is no doubt that cybersecurity is important, period. I mean, no one questions it. The question is whether the behavior of the customers are changing. For example, do you see them sweating more, sweating out the assets, the hardware assets, and maybe refreshing next year instead of this year? Or do you see them signing on 1-year deals instead of 3-year deals? Things like, do you see a change in their behavior because of the concern in the market?
Yeah, I think you, if you look back over the last 2 years, for example, we've talked about changing customer behaviors. During the supply chain constraint, we've talked about how customers were buying the units and not registering the units on a as quickly as they have. I think now, as you look at the current dynamic, I do think there are changes in customer behavior, again, but perhaps in a bit of a different direction. One metric I would point to is that, you know, we're very open about our average contract term, and we disclose how many months that is. If you go back and look at that, you've seen that contract term go 29 months, 28, 27, 26 in the last four quarters.
I think that's affirmation, particularly as you look at the larger enterprises, that there's, you know, maybe less of an appetite for doing a five-year deal and more of a three-year deal. I do think you're seeing things in that regard. We've talked on the earnings call about the close rates. The close rates in this environment are different than what we experienced in 2021 and the first part of 2022.
Got it. I know we don't have much of experience, but if you go back, I mean, you've been doing it, many years, and if you go back to, like, previous cycles, what is driving? At the end of the day, the industry did go through ups and downs. It was not always just a straight line up, and I've, I've been covering Fortinet for many years, and there were some bad quarters in the past. In what conditions do you see more of a slowdown? In what conditions do you actually see what we're seeing today, that the environment is good? The question is, what could drive a change in the behavior of customers to the point where you just cannot grow that fast?
I've been in cybersecurity about 20 years, and these three things drive our industry: It's the infrastructure evolution, it's the threat landscape, and it's regulation compliance. I think right now, compared to the past years, all three of those are changing a lot.
Yeah.
Infrastructure-wise, the big one right now is people are connecting all their OT devices and factories, et cetera. They're moving applications around. That infrastructure evolution changes the way you need to deploy security. With the geopolitics today going on, the attacks are certainly not going to stop. With the AI-enabled cybercriminals as well, it's making it harder to detect, and it's making it easy for them. Each region and country is applying more regulatory and compliance. All three of those things drive our industry.
Yeah
I don't see any of those things changing in the short term.
Got it.
People, I think customers, because they're building out their digital infrastructure, they wanna make a good decision. They may be taking a bit longer to decide who am I gonna have for my networking to connect all my devices, or where am I gonna be from a cloud perspective?
Yeah.
They're taking a bit longer to make these decisions, but they're gonna make them.
Right. Got it. John, when I speak about Fortinet, I speak about two things. Number one, it's great value, meaning your prices for the technology you're providing, your prices are much lower than competition. Number two, it's a great technology, so you're not getting a compromise, you're not compromising on technology. Let's put prices aside, because that's a fact. Let's just focus on technology. I wanna start maybe product by product to speak about your technology, because I think that's what's gonna drive growth for the next few years.
The first question is always legacy, right? It's firewalls and firewall platform and FortiGate platform. How do you see this market evolving? How do you see growth evolving? Are there any competitive dynamics left in the market share gain, et cetera? Is it just about adding more technology to the platform so you can upsell?
Right. We just talked about the firewall marketplace, network firewall. It's about a $15 billion-$16 billion marketplace. I think people predicted wrongly that it's going to slow down a lot because the big use cases five or six years ago were perimeter firewall and core firewall for segmentation. Obviously, if you're moving applications out of their data center, some of that perimeter traffic is going to decrease. People go, "Oh, the firewall market's going to slow down." What they didn't predict is that just the opposite happened, in that firewalls started to be spread across all the infrastructure. One of the use cases people didn't predict is distributed firewalls that sit at the campus, the branch, the factory going forward. In fact, today, Gartner actually refers to the network firewall as the hybrid mesh firewall marketplace.
It's now 12, at least 12 different use cases. I was speaking to a customer a few months ago, and they said, "Oh, I've got two firewalls," they think. When I went through all the use cases, they had nine or eight. Okay, for us, the market, the network security marketplace, the hybrid mesh firewall marketplace, there's lots of new opportunity for us. We introduced, we talked about our new Security Processor 5, which is absolutely designed for the distributed firewall marketplace, where you can add things like 5G and SD-WAN, et cetera. Yes, we've got great price performance, but really, the benefit is we can run more applications on there and run more use cases. That's just one marketplace.
I can talk the same about SD-WAN, about SASE, about endpoints, and all the different marketplaces. You've got to have the right direction in your product to capture as many of the use cases as possible.
Do you think your growth in the FortiGate platform is reflective of your add-on products and add-on features like SD-WAN, for example? Is there still market share dynamics, like, meaning you still take share from Cisco, from Check Point, et cetera?
Yeah, both. I also know we talk about FortiGate, which people sometimes refer to as our appliance. I always refer to our platform as being FortiOS in the fabric. FortiOS, to us, can sit in an appliance, it can sit in the cloud, it can sit in a container, it can sit in our data centers as a SASE service offering, it can sit in a ruggedized device in an OT factory. The ability for us to put that operating system in all the different form factors and then apply consistent security is the key strategy for us.
Got it. SD-WAN as a driver, take us first through the basics. Why are you so successful with SD-WAN?
We saw SD-WAN coming in maybe 2015, 2016. A lot of the early vendors got acquired. Back then it was saying, "Well, let's just replace routing with SD-WAN." We looked at it and said, "Yeah, that's gonna be an important marketplace," 'cause back then, they'll have an SD-WAN, a router and a firewall, so they just wanted to replace the router with an SD-WAN device. We thought, what if we could put both together? Wouldn't it be better for the customer? We took a bit longer to get there, but we actually integrated full SD-WAN functionality right into our firewall. The customer now, we had a process called Total Economic Impact. It took 10 of our customers and looked at the ROI on putting the firewall and SD-WAN together. It was an 800% payback.
The payback was in less than six months. I mean, the economics of just doing convergence between two things, firewall and SD-WAN. Imagine if you can do a wireless controller, LAN controller, 5G, Zero Trust and all. Imagine the economics of that. The ability for us to put SD-WAN right in there was very important. Yes, it took a bit longer. Now we're the market leader, and we don't really know, we have to be honest, how many SD-WAN customers we've got because they can just switch it on.
Yeah.
All our competitors charge for it, that's why we've grown just enormously in SD-WAN. That's what we wanted to do, because in our minds, SD-WAN is that foundation. Once you've got SD-WAN in place, you can start to cross-sell back into the LAN, secure access points, secure switches, endpoint, NAC, et cetera. You can sell into the WAN, which of course, will be SASE and 5G and cloud. If once you've got that platform there, it's right in the center, because once SD-WAN is in place, it doesn't really matter where your users' devices are or where your applications are, because the application steering takes care of all of that. That, we thought that was the most important marketplace to win versus maybe some of the other marketplaces, which I think are easier to switch out.
Got it. Before I continue, maybe, a question to Keith is: How much of your revenue. We speak here a lot about upsell to customers, right? They have a platform, and you sell to the left, and you sell to the right, and backward and forward. How much of your revenues comes from upsell to existing customers versus new customers? How much of a new customer journey you still have ahead of you?
Yeah, the new customer contribution in the Q1 is not large at all. We provided metrics over the last several quarters, so we had about 6,000 new logos in the quarter. I've also followed that up by saying the average revenue from that is about 8% or 9 % of our total revenue.
Got it.
You can see this is very much an expansion journey.
Got it. Okay. Going back to the strategy, and I'm taking you back in time because I wanna understand, you're doing some, "basic stuff," such as secure routers or switches and secure Wi-Fi and wireless LAN. What is the strategy behind offering this basic stuff to customers? Basically, what's the value proposition there?
Yeah, well, it depends on the industry.
Yeah.
One marketplace, which for us, has just exploded, is operational technology. I was talking to some guests earlier. The reason that's happened is because now all the OT technology devices needs to be connected to the cloud or the application. All these environments now are accessed remotely by their supply chain.
Yeah.
I think I've spoken to 10 OT customers that have been infected through their supply chain coming in. In fact, we did an OT survey a couple of weeks ago. 75% of OT customers have had a breach or some sort of ransomware attack in the last 12 months. For us, in that environment, it's very hard to put software and things like that. As we put one of our switches in there, our switches are controlled by our firewall. That switch port there, for example, we can apply all the security that's on the firewall on that switch port. For our customers, and I think going forward, these OT environments won't be restricted just to oil and gas and energy. In fact, again, our campus down in Sunnyvale, south of here, is a mini OT environment because it's carbon emission-free.
All the campuses and some branches will want that OT security inside there, and that's why our secure switches, secure Wi-Fi, with totally integrated NAC and microsegmentation is the perfect answer.
Got it. Again, I'm taking you through the journey of the company, starting with a platform, adding SD-WAN, adding more products that are naturally synergistic to the sale. We have two new areas that are completely different. One is to secure what's called SASE, replace CASB, replace private lines, and second is to secure the cloud, what's called CNAPP. Take us through your journey in basically going into new markets in two ways. Number one is describe your offering in these markets, and number two is, how is it synergistic to your existing customers?
Yeah. Again, we wanted a secure SD-WAN and the firewall marketplace first. Now we're going after what I call security from the cloud v ersus security for the cloud. Security from the cloud is our SaaS capability provided to customers. The ability to add that, what we call Security Service Edge, eventually it's going to be called SASE.
I know even Gartner is getting annoyed with all the acronyms which people are misusing. They're even coming out with a new Magic Quadrant that just says, "This is what SASE means, single-vendor SASE," okay? That's how annoyed they are. To us, that's really important because now we can expand into that. We think it's mainly focused that marketplace, as it is today, on remote access. The trouble is, you if you just do cloud for everything, then it's inefficient. If I've got to go into the cloud and then boomerang back onto my network, into my data center, it's inefficient.
Our view in the future is that you'll have a network, and you'll have a cloud network, a SaaS network, and the traffic will go in between those and backwards and forwards, depending on where the application is and where the user or device is coming from, and then you will apply the security wherever the edge is.
Right.
To us, the ability to hop on one of our SASE networks, then spin up a, you know, a leg right into an SD-WAN network, into the data center, it becomes really efficient and very secure and is much better than just a pure cloud-only solution. Again, their definition will be an SD-WAN solution and an SSE solution that works together under a single console. That's where we see the SASE marketplace, and that's where we're investing heavily. The other marketplace, security for the cloud we think is a bit of a different marketplace. That SASE marketplace, I think, will end up like the firewall marketplace. There's probably 10 vendors there today. It's not like endpoint, where there's 80. There's probably 10 vendors. It'll end up being 3, 4 vendors long term.
The ability to do appliances and cloud and management and security is tough, it's hard. Security for the cloud is a different environment. We absolutely believe that the hyperscalers themselves want to own all the security in the cloud, and they're going to punish you for being in that marketplace too large. Our view is that we want to play in the cloud where we can win. That would be firewalling, it'd be web application and API protection, and maybe some of the smaller pieces, and that's where we're going to focus. We totally believe if you want to try and be the platform inside the cloud, there's another vendor called The Platform that wants to be the platform, and they're going to crush you long term.
Got it. Let's focus first on SASE and what you offer for SASE. Can you take us through? We know Palo Alto, Prisma Access, we know Zscaler, we know maybe Netskope. Palo Alto calls it 2.5 vendor market. Where are you, where are you located in this market? What do you offer, and what are you missing?
Well, I think they're referring to the Security Service Edge marketplace.
Yes.
Okay, that is remote access. They've moved the proxy from the data center in there. They're providing CASB and remote ZTNA only, not on-premise ZTNA, it's partial ZTNA. That's what the marketplace is referring to today. We believe that marketplace will turn into what we call the SASE marketplace, with SD-WAN being very, very important inside there. Unless you have SD-WAN and a good Security Service Edge, you don't have a SASE solution. We believe that the journey, though, continues to Universal SASE. That includes what we call Secure SD-Branch. It includes digital experience monitoring. It includes security as a proxy in the cloud. Universal SASE is one step beyond single-vendor SASE. That includes probably four, eight, nine different applications in one. That will be the difference for us, the ability to provide all that capability with a single console.
And-
There'll be some vendors who'll just stay at SSE.
Right.
There'll be some vendors who are single-vendor SASE. There won't be many vendors who are Universal SASE.
Where are you in the journey? Where are you in the process? What do you have, and what do you still need to have?
I think we have all the components. The hardest thing always with these things, is making them work together well.
Yeah.
You know, right now, we a couple of months ago, we released our ability for our SSE solution, our FortiSASE, one click, it spins up a spoke in the SD-WAN network of the customer with one click. That usually would take a week's worth of professional services from anybody else. That is the key going forward. That was just one example, there's other examples you need to do as well.
Got it. Keith, in order to enable this, you need to invest in cloud capacity or data center capacity. What are the plans in terms of spending, in terms of CapEx, and how does it impact your cash flow for the next few years?
Yeah, I think you look at our recent history on CapEx, you know, Ken's been very committed to the long-term strategy, which includes owning real estate investments wherever he, we can, where it makes sense. I think, you know, the build-out of the POPs for SASE is consistent with that strategy. The POPs themselves are not hugely expensive, you know, it's really a matter of the quantity that you're looking for. I think our strategy there, as Ken's talked about, is one, leveraging the strong relationship we have with the carriers and the service providers with their networks, and at the same time, supplementing that with standing up opportunities in colos or cloud providers as needed.
I think a pretty good proxy, when you look at the pure-play players in the market, and you see what their margins are, you know, call it 80%, if you will, for gross margin. I don't see a reason that it would be significantly different for us. I would back up and say that if you look at the earnings call information over the last several quarters, we've talked about, you know, making investments in data centers and supporting cloud offerings in more general terms, and as a component of our gross margin in services. I think that was a bit of a message to the street and to others that you should see and expect to hear more from us about making investments for cloud offerings.
Got it.
Overall, I don't see that changing our commitments to free cash flow forecast in the midterm.
Does it create any volatility with margins in the meantime, or it's not significant enough to change the margin?
No, I don't think that SASE and POPs and this revenue recognition-
Yeah
This cost structure really creates volatility in the gross margin, if you will.
Right.
Maybe trends, but it can create, you know, fluctuations in the CapEx number.
Got it. We have less than 10 minutes left, and I wanna be conscious of your questions. We have a microphone in the room. Before I continue with my questions, is anyone has any question for management? Don't be shy. No? Good. I'll continue, and if you have a question, please raise your hand. Okay, competition, I wanna talk about Microsoft. Microsoft is turning into a big competitor for some vendors. How do you view Microsoft, or what's your position on Microsoft's competitive threat?
They're definitely a competitor and a partner. you know, I sometimes look at the Magic Quadrant, so we're in 8 Gartner Magic Quadrants. Microsoft are in 6, I think. When you look at it, they're different Magic Quadrants from us, because there's, I think, 11 in total for cybersecurity. so we overlap a bit, maybe in endpoint, which isn't a huge market for us, and SIEM, or isn't, again, isn't a huge market for us. so I see it as a good opportunity to partner with them. I don't think they're gonna go into the secure networking business anytime soon.
Yeah.
They're a competitor. I mean, as I said, I just talked about the cloud vendors, if it's their platform, they'll wanna own it.
Yeah.
Like, they'll wanna own the endpoint, and they'll wanna own everything inside Azure.
Right.
We've got to understand where we're gonna compete and where we're gonna work together. Microsoft will be a partner and a competitor together.
How about the other-?
I don't think we overlap as much as other vendors.
Got it. How do you think about the other vendors? Meaning, do you see more price competition than before, especially now that some companies are struggling?
Yeah, I mean, I think you'll see price competition in markets which are crowded. Endpoint, like, absolutely.
Yeah.
You know, you've got to go to the platform vendor who will try and drive the price down, and you've got 80 vendors running around. At some point, something's got to give. I see in things like Universal SASE, not that many vendors can do all that functionality. The bundling of the pricing components inside there will give us a key advantage.
Got it.
Again, certain markets and certain use cases, there are much less competitors than in certain markets.
I might be just jumping off a little color on that. I think we've talked before that where we see customer interest right now is more about capital preservation and payment terms than it is on discounting. Then the second part of that is on the consolidation strategy. You know, there's a lot of us equate that to mean taking cost out, and certainly it can. I think the primary focus for the CIOs and CISOs right now is eliminating complexity that exists with the point solution vendors.
Got it. Another question that is always important is go-to-market. Rewinding many years, you started as selling appliance. It's a certain type of go-to-market strategy, certain type of reseller, distributors, and partners. Now, it's more about services and more about SaaS solutions. How did you change, or how do you plan on changing your go-to-market strategy as a result?
Yeah, well, there's a change in the type of partners you need, first of all. We talked about some of the service providers now, MSPs, especially selling some of our new capabilities like SD-WAN and SASE, so there's a channel change a bit as well. Also then, you have to train the sales force themselves.
Yeah
To be able to sell. You know, given our portfolio, we have 50+ products in our portfolio, we can't train them across everything. We'll focus on different groups like SASE or cloud, and then we'll set up, you know, what we call business development specialists, who can help the individual sales teams to have that expertise. I think it's impossible to ask a salesperson to go in and sell against CrowdStrike one minute, against Cisco this minute, against some cloud vendor the second. You need that. Enablement needs to be strong. You need to make sure you have all the right tools, the right channel, and then you still need some resources in the field to help them.
Got it.
I don't see us changing, though, from our commitment to the channel, regardless of where the form factor that we deliver. I think that commitment will remain.
It's the same channel, by the way, that sells SASE and sells FortiGate or FortiGate platform?
Yes, the same channel, but you also get specialist channels as well.
Got it.
Like, for example, our SD-WAN, the biggest channel is service provider.
Mm-hmm
Because they're replacing MPLS.
Right.
For endpoint, it's going to be one of traditional two-tier channel motions. It does change depending on which product.
Got it.
Yeah, to bridge John's comment, I think, a moment ago, it's important that we also have a direct sales force that's bringing those opportunities to our channel, and that they have the expertise that he's talking about, and the training and the software and the SaaS solutions.
In the last quarter, we've seen bigger proportion of smaller customers, or smaller platforms. I think there was entry-level platforms had a greater proportion of revenues versus before. Should we read much into it?
That is a reflection of our gaining traction in distributed firewall and SD-WAN.
Mm-hmm.
That's where that market is.
Got it.
You're seeing those numbers go up means that we're winning in that edge marketplace.
Got it. Okay. You started many years ago as an SMB company, and you grew into the enterprise. Can you tell us about, first of all, your position in enterprise? What's the difference in your value proposition for large customers, like a bank, big bank, and your value proposition for smaller customers?
You know, I'd kind of modify that history slightly. We kind of started in service provider and SMB.
Right.
Two distinct marketplaces, we've kind of come in to meet in the middle for enterprise. You know, I think for the larger enterprises, they're definitely still struggling with this platform approach. They still got a best of breed mentality, and in fact, a best of use case mentality. Inside there, we'll go through specific use cases on different vendors. For large enterprises, you've really got to know very good at use cases, and you go use case by use case across the different marketplaces. As soon as you come down the marketplace, commercial enterprise, they totally want a platform.
Yeah.
They just can't afford 40 vendors running around. They kind of want 5 to 6 platforms, that's where we do it particularly well. For the larger ones, it's very specific use cases we focus on.
How do you grow your position with enterprise? What do you have to do in order to better cater for their needs.
Well, yeah, I mean, Keith can talk about this, as the coverage is the most important thing.
Yeah.
You know, as we've gone from maybe that commercial smaller enterprise into enterprise, you know, we can't have an account manager with 10 accounts. They had 20 accounts. You need actually, the other way around, you need 10 account managers on the 1 account.
Right.
That's the journey we're going through. It takes time to get the right people who know all these accounts. That's the journey we're going on right now.
Yeah, I think the value proposition, if you will, get this in, is together with the Gartner Magic Quadrant rankings. To John's point about the having the right resources, if you will, that are sitting down with the CIO and the CISO, it's really about. You can see it when we meet with customers, their ability to engage with them about their business problem and the solution that you're bringing.
Yeah.
You know, at that level, pricing becomes something they almost set aside and let their purchasing group deal with. They're much more interested in outcomes than they are the value proposition at that point.
Got it. Before, I have a set of questions for margins and cash flow, but before I get there, I want to talk about still strategic level. John, if you sit today, you plan, if you plan your product, your roadmap for the next five years, what do you need to focus on? What are the things that you want to be or, where are the places you want to be three years from now, five years from now? Where do you have to put the focus?
Yeah, to keep converging. As I said, we have all the pieces. We just got to make sure they're converged and managed and simplified. You know, endpoint's a good example for us, where we actually have a very large install base of VPN, EPP, and now ZTNA and SASE, and we can add EDR to that going forward. If I'm a customer, and I go, "I can get all five of those things in a single agent," that's great for the customer and great for us. You don't have to use all of them, but they're all there. Converging at the endpoint, converging in the network, converging in the cloud, is where it's we're focused on and making it all work together end to end.
Today, the technology that you have is still not converged, meaning that's what you need to work on?
No, pieces are converged.
Right.
We still need to keep working on the convergence.
Got it.
Like I say, we have four pieces on our endpoint. We'll add EDR at some point and other capabilities.
Got it.
We have a SASE capability, but do we have, you know, a simple one button that presses and adds capabilities like CASB to every app? You just got to make it easier for customers.
Got it.
As you go forward.
Got it. Okay.
Another word for it is automation.
Automation.
Just got to automate as much as you can.
That, that actually, that leads me to my next question, which I'm going to ask everyone today, and I think that by the end of it, we'll be sick of this question. How AI changes your life?
My personal life?
No.
Company life?
No, no, company life. My personal life, I'll ask later. Now, I'm going to talk about company life.
I think it's going to change every part of our business. We've already been using machine learning and AI in our threat research, et cetera. It, you know, it makes it, as I said before, the bad guys are also using that technology against you. We'll be using it in network operations. For example, our AIOps can look at why something's not working, the internet. It pinpoints exactly where it is and fixes it.
Got it.
We'll also be using it in our support services, et cetera, et cetera. I think AI will be used across the whole business, but in different ways. You can't just say, this is AI, I'm going to apply it to this. You've got to make sure it's adapted to each use case.
That's in automation, right? Mostly.
I think, you know, we just did a report from ESG, and I think.
Yeah.
You know, your question about the, you know, the budgets earlier, I see a lot of businesses, they still got to drive that digital business, they still want to build secure networking, they'll still invest in that. I don't see many customers at all saying: I'm going to stop investing in cybersecurity. What they do say is, "I've got to react faster." We just did a report saying that if you connected your SIEM, SOAR, and EDR together in an automated way, you can go from a 12-hour remediation to 3 minutes.
Got it.
That's what they want to do. They want to be as fast as possible in discovering something and then remediating something.
Got it.
Automation means different things for networking versus cybersecurity.
Got it. Done. I got the note. Sort of done. Okay. Thank you very much.
Thank you.
Excellent. Thank you.
Thank you.