Good day, and welcome to the Palo Alto Networks Fiscal Third Quarter 2019 Earnings Call. Today's conference is being recorded. At this time, I would like to turn the conference over to David Neterman, Vice President, Investor Relations. Please go ahead.
Good afternoon, and thank you for joining us today on today's conference call to discuss Palo Alto Networks fiscal third quarter 2019 financial results. This call is being broadcast live over the web and can be accessed on the Investors section of our website at investors. Palogenenetworks.com. With me on today's call are Nikesh Arora, our Chairman and Chief Executive Officer Kathy Badano, our Chief Financial Officer and Lee Klarich, our Chief Product Officer. This afternoon, we issued a press release announcing our results for the fiscal third quarter ended April 30, 2019.
If you'd like a copy of the release, you can access it online on our website. We'd like to remind you that during the course of this conference call, management will make forward looking statements, including statements regarding our financial guidance and modeling points fiscal fourth quarter full fiscal year 2019, our competitive position and the demand and market opportunity for our products and subscriptions Benefits to us and our customers and timing of new products and subscription offerings, including those from our proposed acquisitions of Twistlock and PureSec continued investment in our products our ability to drive outsized growth rates and trends in certain financial results, operating metrics, mix shift and seasonality. These forward looking statements involve a number of risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. These forward looking statements applies of today, and you should not rely on them as representing our views in the future, and we undertake no obligation to update these statements after this call. For a more detailed description of factors that could cause actual results to differ, please refer to our quarterly report on Form 10 Q filed with the SEC on February 27, 2019, and our earnings release posted a few minutes ago on our website and filed with the SEC on Form 8 K.
Also, please note that certain financial measures we use on this call are expressed on a non GAAP basis and have been adjusted to exclude certain charges. For historical periods, we provided reconciliations of these non GAAP financial measures to GAAP financial measures and the supplemental financial information that can be found in the Investors section of our website located at investors. Palatinetworks.com. And with that, I will turn the call over to Nikesh. Thanks, David,
and thank you, everyone, for joining us this afternoon for our fiscal third quarter 2019 results. I'm very excited to be here with you today. This call marks my 4th earnings call as CEO and brings me close to my 1 year anniversary with the company. We've accomplished a great deal this year. Furthering our leadership in cybersecurity and also setting the foundation for our future growth.
When I joined Palo Alto Networks, my primary impression was how cybersecurity is poised to increase in importance to organizations globally and also how the cloud revolution was set to impact the industry. The key themes in my first call were integration, cloud and more automation. I'm pleased to report that after nearly a year on the job, My confidence that these trends is stronger than ever. Moreover, I'm delighted that we have made progress across all these imperatives and will continue to do so. On today's call, I will briefly go through our financials and then provide an update on our 3 strategic focus areas: securing the enterprise, securing the cloud, is where I will spend most of my time given our announcements in this area today and finally securing the future with Cortex.
Starting with our financials, I'm pleased to report that as we continue our transformation, the team continues to deliver. We had yet another solid quarter fiscal Q3 revenues of $727,000,000, represents year over year growth of 28% and non GAAP earnings per share increased by 26 percent to $1.31. Diving to the details of our 3 focus areas, let's first talk about securing the enterprise. We continue to see success around the world with our next generation firewall offerings. Network security remains a top priority for companies and CSOs and we continue to outperform this aspect of the market.
Our new products introduced last quarter are performing well, and we've had a number of significant wins this quarter. Here's a couple I'd like to highlight. We signed an 8 figure deal with the U. S. Government agency.
This is one of the 10 largest deals in the history of Palo Alto Networks, and contributed to our strength in product revenues this quarter. We expanded our footprint more than $5,000,000 each with 10 existing customers, many of whom bought a combination of new use cases and also hardware refreshes. This includes deals as one of the best known brands in the world, a Fortune Fifty Technology company, a Fortune 500 consumer finance company. And finally, we introduced DNS Security Service, a new attached subscription to our next generation firewalls. DNS is already quickly gaining traction.
And while it's early days to share metrics around this offering, I can safely say that if DNS were an independent startup company, it will be getting a lot of attention. We're excited by its early success and optimistic for its future prospects. Our core business continues to be strong, customers becoming more security aware and looking for simplicity in their infrastructure. We continue to make it easier to deploy more services from our firewalls in the most secure way and you should expect us to add more capability here. Now let's talk about securing the cloud.
We continue to be highly focused on delivering technology that enables our customers in the cloud journey. We plan to enable this by delivering a comprehensive set of security capabilities across a broad set of clouds and cloud configurations. This focus and our speedboat approach has led to tremendous progress over the past year. With this, we are delighted to introduce Prisma. Prisma announced this morning, brings our industry leading cloud solutions within a single suite to help our customers in their cloud journey.
Whether you want to connect your mobile users or branch offices to the cloud, protect your application and data in the public cloud, protect your SaaS applications, or are worried about upcoming trends of container security or servers computing Prisma has a solution. Prisma has our approach to deliver industry leading cloud security products integrated fashion. It will address SaaS, API based and inline cloud security across all vectors. We will continue to build on Prisma over the coming quarters and years to make it the industry leading platform for the journey to the cloud. We believe Prisma is already the number one suite of cloud security product in the world.
This quarter, Prisma surpassed $250,000,000 billings run rate and has approximately 9000 customers. The products that comprise Prisma are already industry leading in their own right. Take the VM Series. We believe we believe we deliver the most VMs across the public cloud landscape. With more than 66 figure or higher deals this last quarter alone.
RedLock, which forms the basis for Prisma Public Cloud, surpassed the $100,000,000 billings run rate this quarter. What is even more exciting is that we won more than 10 RedLock deals each over $500,000 in the third quarter with over half of them the Global 2000. This is a rare feat to acquire a company transform its revenue and its profile and trajectory in 6 months is unheard of. Additionally, we're very excited about the new enhancements for our GlobalProtect cloud service. The next version includes the cloud onboarding and management interface and will be available on the Google Cloud platform shortly.
In this quarter, we continued our success on GPCS by securing 40,000 mobile users at the biggest car company in their category 27,000 mobile users at a leading global consumer brand and 25,000 mobile users at 1 of the largest high-tech companies in the world. The success of RedLock is a key factor in making us number 1 in cloud security and gives us the confidence that our introduction of the Prisma suite will bolster our ability to keep winning in this space. In addition, today's announcement of our intent to acquire Twistlock, which is the best in its category for container security, will bring best of breed products into the Prisma Suite. Containers are one of the fastest growing segments of both private and public cloud workloads, and we are looking forward to offering container security to our customers. We also announced our intent to acquire PureSec, a leading provider of serverless security.
These proposed acquisitions will further enhance our cloud security suite. Other example of our ability to acquire companies and accelerate their performance as Demisto, which brings me to 3rd key focus area, securing the future with Cortex. We closed the acquisition Demisto at the end of March, and in our 1st month operating together, I am pleased to report that sales are already doing exceptionally well. Demisto's multi vendor orchestration capabilities, analytics and playbooks are unique. They help our customers further automate their security operations allows them to focus on solving the most complex threat.
This quarter was also notable for the introduction of Cortex XDR at the end of February, In its first quarter of availability, we closed over 50 deals and the pipeline is strong. XER is the successor of EDR. XDR enables teams to stop sophisticated attacks and adapt their defenses to prevent future threats by integrating network, endpoint and cloud data to review the signal to noise ratio plaguing security analysts. In fact, earlier today, MITRE released test results validating the capabilities, Traps and Cortex XDR. The result from MITRE's attack testing confirmed that Traps and Cortex XDR provides the broadest coverage against different attack techniques with the fewest missed attacks at a all ten vendors recently evaluated.
We also had some notable Cortex XTR wins this quarter, including a 7 figure deal with the U. S. Health insurance care organization over 26,000 employees, a win at a major Asia based airline and a win in one of the largest cities in the world. To wrap up, we had a solid quarter of enterprise execution with strong progress in the cloud and with the initial rollout of Cortex. We continue to see the opportunity to expand our market leadership to be one of the platform for both today's securities needs and to those tomorrow.
As my first year comes to an end, I would like to make a few observations and reiterate a few things. 1, we will continue to expand our leader lead as a number one cybersecurity company in the world, one that provides simple, integrated and leading products to help our customers. The company I walked into had done a great job in building the world's best firewalls and expanding their ability to secure the enterprise. Over the last year, addition to strengthening our firewall business, we have made tremendous progress in areas which will become equally, if not more important, the cloud and automation. My ear here has convinced me that we have the right strategy and the right team, and we're making the right moves.
Transition's take time. This one will also take time. There is no team better prepared than us to make this happen. The new products and delivery mechanisms are more SaaS based and have a different consumption model. In that, many cloud customers purchase annual subscriptions rather than multiyear deals.
The brilliance of a SaaS model though is the annual recurring revenue stream. As we evolve our business, maximizing this recurring revenue stream will be our primary focus. While this may impact total billings, we would expect to see better margin performance. And most importantly, underlying this trend is a growing demand for our products, which is what matters. Reading some of your notes, I know that you're watching the internal management moves we are making.
You should know that any leadership moves that we're making are being made in a thoughtful manner and for the right reasons. Rest assured, while I might not have spent time in cybersecurity, I know how to build great teams. This is an area, me and the team are extremely vigilant and focused on. I'm confident that 1 year out, we are stronger. We are better focused a more robust product roadmap and our teams are poised to win.
This is a time to believe in our plans and our ability to execute in our strategy to win the increasing addressable market in our industry and our quest to increase our lead as the number one enterprise security companies work. And with that, I'll turn the call over to Kathy.
Thank you, Nikesh. Before I start, I'd like to note that except for revenue and billing figures, all financial figures are non GAAP, and growth rates are compared are reflected under ASC 606 as we adopted the new standard as of August 1, 2018. In the third quarter, we continue to add new customers at a healthy cliff and further expand our existing base. We did this while balancing investments In Q3, total revenue grew 28 percent to a record $726,600,000. Looking at growth by geography, the Americas grew 28%, EMEA grew 26% and APAC grew 29%.
Q3 product revenue of $278,400,000 grew 28% compared to the prior year. Our SaaS based subscription revenue of $258,800,000 increased 35%. Support revenue of $189,400,000 increased 20%. In total, subscription and support revenue of $448,200,000, increased 28% and accounted for 62% share of total revenue. Turning to billings, Q3 total billings of $821,900,000 increased 13%.
Q3 current billings were $799,500,000, net of acquired deferred revenue, up 25% year over year. The dollar weighted contract duration for new subscription and support billings in the quarter remains at approximately 3 years, but declined by 4 months year over year due to the strength of our cloud business and fewer multiyear deals. Total deferred revenue at the end of In addition to robust new customer acquisition, we continue to increase our wallet share with existing customers. Our top 25 customers, all of which made a purchase this quarter, spent a minimum of $38,700,000 in lifetime value in Q3. A 35% increase over the $28,700,000 in Q3 of fiscal 2018.
Q3 gross margin was 76.5 percent, which was up 30 basis points compared to last year. Q3 operating margin was 20.9 percent, a decline of 50 basis points year over year and includes a headwind of of net expense associated with our recent acquisitions. We ended the 3rd quarter with 6503 employees. On a GAAP basis for the 3rd quarter, net loss declined by 50% to $20,200,000 or $0.21 per basic and diluted share. Non GAAP net income for the 3rd quarter grew 30 percent to $130,100,000 or $1.31 per diluted share.
Our non GAAP effective tax rate for we finished April with cash, cash equivalents, and investments of $3,700,000,000. Due free cash flow from operations of $296,400,000 increased 23%. Free cash flow was $276,100,000, up 30% at a margin of 38%. Adjusting for cash charges associated with our headquarters in Santa Clara, free cash flow in the quarter was $279,800,000 up 27% at a margin of 38.5 percent. Capital expenditures in the quarter were $20,300,000, DSO was 51 days, a decline of 6 days from the prior year period.
Turning now to guidance and modeling points. For fiscal Q4 twenty nineteen, we expect revenue to be in the range of 795 to $805,000,000, an increase of 21% to 22% year over year. We expect Q4 'nineteen non GAAP EPS to be in the range of $1.41 to $1.42 which includes expenses related to the Demisto acquisition and the proposed acquisitions of Twistlock and PureSec, using approximately 100 to 102,000,000 shares. Before I conclude, I'd like to provide some additional modeling points. We expect full year billings to grow approximately 20 Our Q4 non GAAP EPS guidance includes approximately $15,000,000 of net expense or $0.12 per share, attributable to a full quarter run rate of our Demisto acquisition and the proposed acquisitions of Twistlock and PureSec.
Our Q4 EPS guidance also includes an expected $0.02 impact attributable to U. S. Tariffs on Chinese origin goods. Excluding these acquisition and tariff expenses, we would expect non GAAP EPS to be in the range of $1.55 to one $0.56. We expect our Q4 non GAAP effective tax rate to remain at 22%.
CapEx in Q4 will be approximately $35,000,000 to $40,000,000, with approximately $20,000,000 related to our headquarters in Santa Clara. Finally, turning to free cash flow for the full year, we continue to expect an adjusted free cash flow margin of approximately 36%. The adjustments include one time items such as the expected settlement of our 2019 convertible debt, and cash flow associated with the additional investment in our headquarters in Santa Clara. You can review these adjustments to free cash in our supplemental financial information document, which is posted on our Investor Relations website. With that, I'd like to open the call for questions.
Operator, please
you.
We'll go first to Keith Weiss with Morgan Stanley.
Excellent. Thank you guys for taking the question and really solid quarter. Nikesh, I think you might be understating sort of operating well through transition was 27 percent project revenue growth against a really tough comp. That's a truly impressive number. I wanted to ask you, you have one question and one to Kathy.
The question for you is on the M and A strategy. One of the things I think investors have been looking for for a while, somebody who could effectively consolidate demand within security. It sounds like the individual companies are doing or individual solutions that you bought like RedLock are doing really well. Can you talk to us about the progress that you've made in sort of creating a suite or getting people to buy across the portfolio and where the new acquisitions kind of fit into that suite and sort of how you expect to sort of catalyze that activity across the board. And then for Kathy, in terms of the the shorter duration.
Can you give us some kind of indications on sort of where that impacted? Was it across the board for both sort of new subscriptions as well as maintenance or is that just focused on kind of just the newer stuff.
Thank you, Keith. Thank you for your comment and thank you for the question. Let me start talking answering your question around the acquisitions and the launch of Prisma today. As you know, about a year ago, we started talking about how there is going to be a big move to the cloud and we were getting ready for it. We owned Evident, Evident only worked on AWS We felt we needed to complement that with more capabilities who acquired RedLock.
RedLock had de minimis revenues 6 months ago. And just the sheer success of RedLock that we've seen in the last 6 months, where we've seen customers close deals within a week. I think that's unheard of in the cybersecurity space. You walk in to show the customer solution and a week later, you walk out of the purchase order. So that's emboldened us with this notion that there's not enough cloud security solutions being offered to customers who are making this journey to the cloud.
And if you look at the customers 2 years ago, they were talking about public cloud. Today, they're talking about containers. And we looked in the market, there were only two players and Twistlock was by far the leader. And talking to customers, they still want to buy best of breed. So our team made the decision that it's important for us to acquire Twistlock and integrate that with RedLock as soon as possible.
So you will see us integrating both RedLock and Twistlock. And then the next conversation people want to talk about is serverless. And we look to the market and pure by far as a leader in serverless computing. Serverless security, and we decided to acquire that at the same time. We intend to integrate this as soon as possible thereby offering a fully sort of integrated public cloud security suite where customers don't have to buy on containers
for private cloud, public cloud, on prem,
SaaS or serverless. And That's where we see the consolidation from a cloud security perspective. We've also integrated pieces of GlobalProtect cloud service with Aperture. So you can see inline SaaS security. As opposed to just API, which Aperture offers.
So we are driving hard and fast to try and keep creating integrations. So customers don't have to buy a piece product and spend time integrating. The problem with the cybersecurity industry has been for $140,000,000,000 industry with $80,000,000,000 in services and $60,000,000,000 in product that $80,000,000,000 is spent integrating the $60,000,000,000 of products. We want to make sure that we don't make this mistake going into cloud. And that's kind of what underpins our acquisition strategy as it relates to consolidating these products and as it relates to providing a platform for cloud security.
Kathy? Yes. And Keith, on the contract length question, as you mentioned, we did see a decline in contract length are, as we mentioned, 4 months year over year. And there are a couple of things driving that. One is that we had very strong performance in our cloud products, mix of our Prisma Public cloud this quarter was very strong.
We saw terrific growth as Nikesh mentioned in his prepared remarks. So, we're really excited about the trajectory of that business and the opportunity for us there. Additionally, are focusing more on doing, making sure that we have good annual recurring revenue
in our contracts. And that's our primary
focus this year. And so some of it's customer preference, some of it's us trying to structure deals to maximize that annual recurring revenue stream. And so both of those combination of those things are, driving the average contract length down. And we think both of those things are really terrific then we're we're very pleased with the results.
We'll go next to Gur Talpaz with Stifel.
Great. Thanks for taking my question. I have a question here on Twistlock. And Nikesh, I was hoping you could expand a bit on the strategy. So I want to understand is do you view container ecosystems as a natural extension of existing networking environments, I.
E. Do you see this as kind of a natural fit alongside what you already do from a policy management standpoint? And then take it one step further, can you talk about how you plan to attack the devsec ops environments where Twistlock currently plays?
So, Gur, I've
always known that I should try and give only a 2
or 3 sentence answer to your question and then Lee jump in because I know he's going to shorten it technically otherwise. But I will tell you that The cloud world is different. In the cloud world, you have to chip for that. You have to go to devsec ops, and that's why Twistlock plays because they go through the entire build, run and deploy process. And that's why I think Twistlock is important.
That's why we think devsec ops is important. Twistlock has an on prem solution. RedLock has a SaaS solution. You can logically expect us to be present in both environments because this allows us to look at both public cloud and private cloud. How am I doing so far, Gur?
So far so good. All right, now I'm going to take the high ground and hand it over to Lee. I think the main way to
think about this is with cloud applications, they are increasingly being architected with multiple different sort of cloud services underpinning them. And whether that's PAS services, infrastructure as a service or VMs, increasingly containers are foundational, component of these architectures, serverless is emerging as one of the key elements And being able to combine all of those together into a single cloud security suite, integrated together that allows the customer to see from the shift left at the build stage all the way through run time. The entirety of their application, how it's designed, architected and secured, is a very powerful capability that we're able to bring together, with Twistlock as a core component of that, but also PureSec for serverless. And of course, RedLock from a cloud platform perspective.
That's super helpful. I appreciate it. Nice job Nikesh. Thank you.
We'll go next to Walter Pritchard with Citi.
Hi, thanks. Just a question for you, Nikesh. On the product side, I guess one concern that may arise here, you've done a lot of M and A. It feels like your cloud strategy largely inorganic. How do you remain convinced and keep building the culture of building products organically to either should I keep these products going in the future or be able to address some of the new needs that come up down the road without having to spend this kind of
money on M and A? I think Walter, that's a fair question. But if you look at our core business of firewalls, we're doing really, really good in firewalls. Our teams is our teams are innovating. We added DNS security as a service, as a subscription.
We are working on some more interesting things Hopefully, we shall be able to share more about them in upcoming quarters. But there is innovation going on for sure in our core business. Work, our firewall capabilities and other capabilities around it are developing. That's where we have strength. We have hundreds of engineers, if not 1000, working on our core networking capability.
Firewall security capability. We also had Bill's capability around endpoint with Traps and Sec 2, which as I mentioned, we are rated best in the number of unmissed attack vectors as far as MITRE's test was concerned. So clearly we have that core capability. Cloud was an area where all of you were asking the question, how will Palo Alto Networks make the transition to cloud? Do we have the core capability?
I think it's fair to say we have used the RedLock contingent and the Evident team to create the core for the cloud. But at the same time, we didn't want to wait, with Twistlock having over 250 customers who are using them for container security. We didn't want to wait. We also are at the same time launching of vulnerability scanning capability in RedLock, which is the early steps towards containers, but our customers want the entire thing. They want the full capability for the payment security.
They want best of breed. So it became incumbent and imperative that we create this combination of RedLock and Twistlock. And honestly, if you go back and think, The price we paid for RedLock versus the fact that it crossed $100,000,000 run rate this quarter, means we must have done a good deal. Because in two quarters, we're able to take that product and deploy it to our across entire Salesforce. Yes, we have cloud capability.
We have it in our Salesforce. We have it in our RedLock team. We have it in our Twistlock team. We should be able to put the RedLock and Twistlock and PureSite capability together and use our core team and our cloud sales team to be able to go and create more revenue in this product. Because I think right now, there is a TAM of over $2,000,000,000 in cloud security, which is unserved there are not enough products, there are not enough salespeople going out and demonstrating the products to those customers.
So right now, it's really a question of sort of a land grab going out there and demonstrating the product to the customer, being able to deploy it in their enterprise and being able to have people who understand these products, well enough to be able to solve them.
Great. And then Kathy, maybe
a follow-up just on the duration side. Is it as simple as sort of us thinking about the unattached products are going to kind of go to a 1 year duration over time versus the subscriptions that are attached to the firewalls are going to be 3 year. And as we kind of model out those 2 revenue streams, we would see it, the duration go as that mix goes?
Yes, Walter, I think you're correct that over time as our business becomes, more cloud based and more SaaS subscription based we will see, our customers wanting to buy the way they buy other SaaS products, and that tends to be more towards the 1 year duration So over time, I do think that that shift will happen. In this quarter though and this year, we've also been very focused on the rest of the business and just making sure that we're doing deals that preserve that annual recurring revenue stream. And Nikesh is raising his hand. He wants to
jump in.
I'm going to jump in, Walter. I think, look, I know you guys are all getting excited about the billings number. And trust me, we stated it left, right, and center to make sure that we were not missing anything in the billings number. I will tell you the underlying fundamentals of our business continue to be strong. We like the customer interest.
We like the fact that they want to buy more security services from us. The two effects that are happening: one is clearly clearly the unattached product effect, which is we're seeing better than expected growth and you're seeing shorter duration on those. And the second is, to be honest, we are trying to do more new business and less business of going to our existing customers and doing multiyear bundled deals with large discounts. And we've told the sales force that we'd like them to go out and get new business. As a consequence, we're not doing that many as many, not that many, as many long deals with large discounts that we used to do in the past.
And I think I said that I can't be more explicit than saying, we expect over time that our margins should do better as a consequence of that. And it will have an impact in the way you look at as the way billings mechanically calculate themselves.
And we'll go next to Sterling Auty with JP Morgan.
Boy, I have a different question lined up, but after that answer, It really begs the question. If everything does start to triangulate towards more of an annual contract versus a 3 year deal, shouldn't that just weigh on your cash flow growth until you succeed in kind of transitioning through that process?
Look, if everything happened overnight, yes. I think there's going to be an orderly transition over time. As the proportion of our non attached business rises. And as we continue to manage our long term core business, so yes, with our cash flow profiles change, yes, Will it improve our margins? Yes.
And that's how you transition from a business, which has been a very hardware focused business to a business. It becomes a long term subscription and SaaS oriented business.
But I'll just add that the reason we're focused on doing this is because that we believe it's ultimately better for us in the long run financially and will improve our cash flows. Certainly.
In every analyst I talked to in the last month, 9 months has asked me this question saying, when will Palo Alto Networks become a ratable business? When will you become a SaaS business? You can enjoy the multiples at SaaS business enjoy. Well, SaaS business enjoy a multiple and I have a certain financial profile. So you can't have your cake and eat it too.
You want me to transition to that. It's going to involve the transition.
That's fair enough. One follow-up in terms of the business in the quarter. Looking at that support revenue growth, one question that pops to mind is how was the linearity in the quarter? And was things just more back end loaded and perhaps that caused a lower support revenue just on the timing on the product revenue that you're able to close?
Well, support revenue growth of, 20% was pretty strong year over year. And one thing to just keep in mind about support is, well, there are a couple of things to keep in mind. 1, it includes professional services, which can vary from year to year quarter to quarter. And then the other thing is that, as we continue to grow our subscription business, which we've got a lot of our, billings now coming from non attached and revenue now coming from non attached. Those don't have the same concept of support attached to those offerings.
So that's just another thing to keep in mind when you consider support.
And we'll go next to Ken Talanian with Evercore ISI.
Hi, thanks for taking the question. So we are happy to see you move to a more ratable business, but how should we think about the pace at which you move to more ratable sales over the next year or so given the additional non attached subscriptions you're getting from these acquisitions? And like how might how soon may we see subscription surpass 50% of your billings?
Well, Ken, we're not going to give you forward guidance on those topics, but all I will tell you is you can see the way our cloud security business is beginning to perform. I think we said Prisma has already gone over a $250,000,000 run rate, billings run rate this quarter. And it's growing at very, very robust growth rates way ahead of the company growth rate, as you can imagine. We hope that those growth rates continue. Which over time will create the mix shift that is required to make a higher proportion of our business more and more ratable, which will have the the impact of shorter duration in terms of impacting billing, which will have the cash flow profile changes associated with it.
But I don't expect happen in a short order. I think this is going to take us a reasonable amount of time. But hopefully, that time that we take happens at the growth rates that we're enjoying overall as a company, clearly, if you're growing roughly 2.5 times the rate of the growth of industry, you must be taking share from other people in this process.
Understood. And have you made any changes to the pricing, packaging or the go to market for the cloud focused products with the launch of the Prisma branding?
Yes. Look, as I had mentioned, we had very early in this process introduced this notion of speedboats. And the notion of speedboats was to have dedicated people across the organization and across functional basis. So to make sure that we have people focused on making our customers successful by having a dedicated customer success team, by having specialists who can go ahead and sell cloud and partner with our core sales team in accounts to make sure that the focus is not lost on our non attached services, which is what has been paying dividends. We continue on that track.
We have dedicated teams. We have now consolidated our GPCF and public cloud speedboats into the Prisma speedboat. We've learned from the last year that Prisma as a the customers who are going to make this journey to cloud are looking at all these products as a as a combined suite of products. So we are driving the same degree of acceleration that we have on the public cloud speedboat or the rest of our Prisma products and put them all into one speedboat, which is led by, by the same people who ran the public cloud speedboats. So yes, we have made changes on the go to market side.
From a focus perspective because we don't want the smaller, faster growing business to get lost in the large expense of our core business.
And we'll go next to Andrew Nowinski with Piper Jaffray.
Great. Thank you for taking the question. So, maybe from a perspective, I know you made some sales leadership changes in the U. S, yet your growth in the U. S.
Remained relatively unchanged. However, growth in EMEA did slow. So just wondering if you can provide any more color on the slowdown in EMEA as well as any changes, the new sales leadership team in North America has made?
Well, I think, I was trying to figure out where the correlation you're going to draw was. We've made a change here or nothing changed. We didn't make a change there and things got worse. So I'm not sure what the implication is. Look, Europe had a seasonal 3rd quarter like 3rd quarters across the board seem to be challenged.
There was a seasonal slowdown vis a vis EMEA. We, the team there feels confident that they will continue marching towards their annual targets. So hopefully, they will make up for what they were not able to do this quarter. In the upcoming quarter. In terms of the UF, we have hired a lot more people in the last quarter, which we expect to ramp up in Q4 and next year because part of the opportunity we had was we felt that we did we were not knocking enough doors.
And as I mentioned, focus of more new business. The team is strong. The team is motivated. We don't think that the leadership change in the Americas has had much of an impact in terms of the performance of the team except for the fact that they continue to be excited and motivated to keep delivering quarters.
I think I guess I was just asking the changes you made obviously had a fairly positive effect in the U. S. I'm wondering is there any changes needed in EMEA
or is there any abnormal out and the
growth back going. I hope our head of Europe is listening to this call. We intend to make no changes in Europe. He's strong. He's going to make sure he delivers this quarter and retain his growth rate in the upcoming quarters.
We'll go next to Karl Keirstead with Deutsche Bank.
Thank you. I've got two questions for Cathy. Kathy, if billings as Nikesh was just describing might be a less useful measure of the fundamental health of Palo Alto Networks. Do you think that that your backlog or RPO number might have more value? And would you mind disclosing it?
I think you've disclosed it in your last couple of Qs?
Yes, it's not a massive number for us and it will be disclosed in our Q again this quarter. And you can do the math on the difference between deferred revenue and that number. The number that we provided on the earnings call is the current billings number, which grew nicely at 25% year over year. And that's a metric that I think most analysts have been monitoring for a number of years and have been asking us about over the years. And so, I think that continuing to focus on that number is important along with our revenue growth, obviously.
Got it. Okay. Great. And then just as a second question, Kathy, just on the adjusted free cash flow margin guidance, of 36% for the full year. I think through the 1st 9 months of this fiscal year, that adjusted free cash flow margin would average out to be close to 39%.
So to end up at 36% for the full year, you would need your 4th quarter free cash flow margin to dip quite a bit, maybe even to below 30. And I'm just wondering if you could touch on why that would be.
Yes. We did talk about the adjustments, that we're making in the quarter. So the adjustments will be, particular to the Q4 number. But Additionally, we tend to have more expense in that quarter and more commissions expense in that quarter. And so we're comfortable with the full year guidance of 36 percent.
And we'll go next to Rob Owens with KeyBanc Capital Markets.
Great. And thanks for taking my question. If you look at the strength that you saw in product revenue yet again, can you kind of paint what the landscape looks like? I mean, Q1 in general was a little weaker for most security vendors and you continue to put up impressive results on the product side. So just curious in terms of sales cycles, what the demand landscape looks like?
And also, what kind of levels you're seeing of discounting out there?
Yes. So, we did see a really strong product growth number, and we're obviously very thrilled with that. The new products that we have introduced over time remain very competitive in the market and, our sales teams as we mentioned, are doing a good job selling those products. We're seeing some improvement, as Nikesh said, in terms of sales cycles for the cloud products that we're selling. There seems to be a lot of demand for that, and it doesn't take a lot of convincing.
But overall, I wouldn't say that there's been significant change in terms of our sales cycle for selling the vast majority of the products that we sell.
Great. Thank you.
And we'll go next to Saket Salia with Barclays Capital.
Great. Thanks for taking my questions here. Kathy, maybe for you on the product revenue number, We touched on some customer examples of refresh. And I think it's very clear that you're optimizing kind of the attached but can you just talk a little bit about the health of firewall refresh more broadly in the quarter? And how you're sort of thinking about that trend going forward?
Yes. Well, when people talk about refresh, they tend to talk about it in two different ways. So I'll just talk about both. 1 is the just general market refresh, and that is going on all of the time, right? That's, how we get most of our new firewall customers is somebody is refreshing their on a firewall refresh and they're replacing old firewalls with new firewalls.
And that's how we go in and take market share and continue to land and expand, right? The other refresh that people talk about is our own internal refresh. So our own customers having sort of reached a 5 to 7 year life of their firewalls and they're replacing those firewalls. And that is a question that we get asked. A lot about is that driving our growth in the quarter.
And certainly it contributes every quarter, but as we've said for a number of quarters, we think that, that opportunity is more in front of us, than behind us because a number of cohorts. The cohort sizes just get larger and larger over time. And we have portion of refresh in our numbers on that opportunity. We think it's a great opportunity for us in the future. And we don't we're very encouraged and focused on getting that refresh opportunity, both the general market refresh opportunity as we continue to take share and our own internal refresh opportunity.
Got it. Got it. Maybe for my follow-up for you, Nikesh. I know in the beginning of the quarter, in early February, there were some changes in the channel program I think some sort of adjustments or different models for RedLock and different models for partners that sort of sell the broader portfolio Can you just talk a little bit about how, if at all, those sort of impacted in the quarter? And what's been the feedback from the channel as you wrapped up this April quarter?
Look, I think we evaluated various possibilities of channels, which is where there was a bit of noise, not this quarter, but it's the prior quarter. And where we landed is a happy place both for the channel and for us. If you understand these cloud products, these SaaS products actually end up having to be sold not just to our current channels, but also through our future channels, which is basically the marketplaces of AWS, Azure and GCP, because when customers go deploy public cloud capabilities, they go to the marketplaces of the public cloud providers to find other tools and accessories and products. And we have to be present there, which requires a different model from a activation and deployment and sale perspective. So We enabled that.
We made room for our channel to be able to refer customers to that marketplace. As a result, they continue to get their economic in a referral way as opposed to the way they've been used to in the past, which is a more hardware process. And I think things are stable, things are happy. For selling product. The challenge is making money and, customers are able to buy it whichever way they want to consume it.
And we'll go next to Phil Winslow with Wells Fargo.
Guys. Thanks for taking my question. Congrats on a strong start to the year, particularly on the product. I'm sorry, with Q3, particularly on the product side. Just wanted to focus on Cortex.
We spent a lot of time on product and And, Prezma, but maybe if you give us an update on Cortex, particularly if you look at the Cortex hub, how you're feeling about the progression there of applications and then also just usage and call it hydration of the data lake?
Well, as I mentioned, look, right now, there are 2 very clear parts of Cortex. 1 is the Cortex XDR combination, which requires the data lake, which includes Traps as we last quarter, we announced that we're going to make Traps and it took a park on XDR offering. We felt this, but it got validated this morning, coincidentally. We believe XDR is now the leading product in the market and it beats any EDR product, hands down. So many of those, you know, have been displacing the traditional legacy vendors in the market.
We believe we have not just a competitive product, but a better product. And we're seeing that in the pipeline growth. We're seeing that in the deals that we've done. We've done over 50 deals for our Cortex XDR. In about 6 weeks since we announced it and deployed it in the market.
We have a very healthy pipeline going into Q4. We are applying a speedboat concept to Cortex XDR just so we did the way we did to public cloud and Prisma. So we have lots of hopes from Cortex XDR and every Cortex XDR deal every deal to deploy Traps requires the Cortex data lake and the Cortex data lake is being deployed in those cases. In addition to that, Demisto is part of Cortex now because customers look at automation from a SOAR perspective, even though we only had Demisto in our numbers for only about a month this past quarter, It has surpassed any business plan they had prepared to their own end by sheer fact that our core team is really excited about Demisto. Every one of our customers got excited about Demisto.
And we expect that trend to continue going into Q4. So generally on Cortex, we are bullish both from a Cortex XDR delay cortex hub perspective as well as the Demisto perspective. Many of the Prisma integrated capabilities that we are launching this quarter actually use the Cortex hub to create the integrations between some of our products. Whether it's VM and aperture or some of the integrated reporting.
And we will go next to Michael Turits with Raymond James.
Hey guys, good evening. Obviously, everything looks really strong. From a top line revenue, current billings product. But as we look into next year, what should we think of first on the EBIT margin side since I would assume that we have a lot of dilution coming from these acquisitions. And then what should we think of as the trajectory for cash flow margins declining before they begin to
when we're ready to do so, we've provided guidance for the full year, which takes into account the contract length issue that we discussed earlier. So we're not ready to provide long term guidance on either one of those metrics But on the operating margin, you can see this year, we've been operating within the framework. We've improved margins despite the fact that, well, on an organic basis, which is what our framework has been about. And so we're very focused on continuing to ensure that we're working towards bottom line profitability at the same time that we're focused on growing the top line. And I wouldn't expect that to change much.
And then Nikesh, I wanted to ask about GlobalProtect Cloud Services and to be fairly specific about competition with Zscaler. How do you see that competition? And do you feel that with them potentially moving to certain firewall applications, it's necessary perhaps for you to do more, in the proxy area. In order to make sure you're competing on an even basis?
I'm going to defer this question to my friend, Lee, even though I'm sure I can butcher the answer, but I'd rather let him do it.
Yes. We look, we've been very consistent. We talked about global to cloud service. Let's now prisma access. We believe that fundamentally, you need to be able to secure all applications.
And the way to do that is with a next gen firewall foundation, in the service. Which is something that clearly we have a unique and distinct advantage of and is fundamental to how Prisma Access is architect and how it works. As we mentioned in the launch, announcement today with Prisma, There are a couple of key enhancements coming to Prisma Access. Number 1 is we are going to be supporting GCP as a public cloud foundation, in the near future. That will extend Prisma Access app to 100 plus locations around the world.
So from a pure network latency performance perspective, we believe will be, the best at the performance side of the service. And second, we announced that we will soon have a cloud management service to go along with it. Such that for customers who want the entire service to be done through the cloud, we'll be able to support that from onboarding to configuration management to monitoring.
Okay. Thanks everybody.
And we'll go next to John DiFucci with Jefferies.
Thank you. My questions have largely been answered. I just have a sort of a follow-up for Cathy. Kathy, really appreciate your guidance to focus on current billings, which makes total sense to us and not to really worry about RPO a lot. Just trying to get ahead of any differences we might see going ahead.
It seems to me that we might see a little more volatility in current billings. Because previously long term deferred revenue would have sort of smoothly flowed into current billings every quarter whereas that might now be a little more lumpy upon annual renewals.
And I
don't want to get too cute with how this, but the current billings trend should remain the same as they would have been maybe just a little more lumpy until it's sort of moves out over time as more sales are billed annually. Does that all make sense?
Yes, I think that that makes sense. The changes in mix are happening gradually over time. We did see really great strength in our cloud products this quarter, which was a great thing for us, obviously. And so we're continuing to expect strength there, and we've guided assuming that strength. But for the rest of it, I think you're absolutely right, that it's not going to be an overnight transition, it'll happen gradually over time.
And we'll go next to Fatima Boolani with UBS.
Good afternoon. Thank you for taking the question. Nikesh, I had a question for you regarding Prisma. It makes a ton of sense to amalgamate your 4 pillars on the cloud security front. But given each solution within the Prisma portfolio, has a different pricing models and potentially go to market models.
I'm wondering if you can clarify Prisma purchase is sort of an all or nothing. And to the extent it's sort of an all deal, how are you going about pricing the offering given the diversity of revenue models within that portfolio? And then I have a follow-up for Kathy.
Thanks for the question, Fatima. I think, look, You're right. That the cloud journey has different aspects and there have been individual products that customers have gone and bought. To enable different parts of this journey, whether it's the GPCS competitors when it goes towards remote branches and and in your offices or whether it's the public cloud scenario, or whether it's your CASB scenario. And part of our thesis is that you shouldn't have to have multiple products because there are interdependencies between these products, which creates security exposure.
So whilst we haven't alighted on exact pricing because we're still we just announced the acquisition of Twistlock and Curesick this morning. He can expect us to not distinguish in terms of how customers deploy their applications, whether it's private cloud, public cloud containers, serverless public cloud, because we think that there should be consistency and it should be purely based on the amount of volume you transfer to the cloud as opposed to the different ways you do it. So should expect it to see some cohesity in pricing. Having said that, given the reality of the market, we will still make our products available in their individual forms to compete directly with people in the market because we believe our products are very competitive and better in most cases. But obviously, the integrated product will have a lot more benefits than just buying the individual piece parts.
Fair enough. And Kathy, for you, just two financial ones, we have an understanding of the OpEx impact from the in acquisitions, but I'm wondering if you can speak to the totality of the revenue and billings contribution from recent acquisitions. As well as the above seasonal jump in the sales and marketing expense this quarter. And that's it for me.
Thank you. Yeah. We do have, as I mentioned in the prepared remarks, increase in our expense associated with and our guidance for revenue reflects both the top line and bottom line impacts that those, although we haven't called them out explicitly. On the sorry, what was the second part of your question? Higher than even the sales
and marketing jump in the quarter, yes?
Yes. Our sales and marketing teams, as Nikesh mentioned, I don't really think that it reflects any sort of big change in the business, but we have been hiring sales in Americas in particular to drive more coverage. And so it takes a while for those expenses to actually result in top line revenue in particular, right? So as we see those reps ramp and as we cover the map and get more get that America's number up even higher, hopefully. We'll see that change over time again.
Great. Thank you.
Yeah.
And our final question comes from Matt Hedberg with RBC Capital Markets.
Hey guys, thanks for squeezing me in. One for Nikesh. Your firewall momentum and results remain strong clearly versus peers. But as you continue to expand your cloud based product portfolio, can you talk about some of the steps you're taking to over to avoid over rotating sort of the general sales motion from that core firewall base?
I'm sorry. Can you clarify what do you mean by over rotating away or anything?
Well, yeah, I guess, you've got a lot of exciting products cloud side. And I know there's a lot of overlay teams, but are there things that you can do sort of maintain the momentum in core firewall despite sort of all the new shiny toys that I'm sure a lot of customers are probably earning for?
Look, whilst we're not going to disclose, but we added a lot of quota carrying reps in the last quarter purely for us to be able to drive more coverage and more, more cover more accounts in our core business. This is not for cloud. This is not for prison months is not for courtings. This is to drive more coverage, across our existing core business. As I think, remember it was there with Ken said it, someone of you guys said that you have seen us show strong product growth across every quarter, 28% product growth this quarter.
So clearly we're not taking our eye off the ball. We understand what pays the bills. We understand where the money comes from. And we are seeing traction out of the market not like people are not buying firewalls. The rumors of the firewalls being debt are overstated.
So And we think, we think that is still continue it's a still a continuing strong trend on the firewall. We continue to hire reps. We continue to try and penetrate more accounts. From a firewall perspective. We also are working, as you know, to add more capability in our firewalls.
So the average price per firewall goes up for us for a customer because they can do more things with the firewall, not just less. So we are we understand that to maintain the growth rates we have in the industry it's not going to happen just by adding more product and growing them rapidly. It requires us to maintain a solid growth rate in our core business and we are focused on that.
That's super helpful. And then maybe just one last one on FCR, in particular, 50 deals in the quarter is great. Can you talk about where those deals are coming from? I assume a lot of them are making some of the legacy players, but are you able to also able to take share from some of the next gen EDR vendors?
Look, what's happening is that customers understand. The one good thing what has happened is that the EDR vendors have paved the way in the minds of the that end points need an evolution. And the evolution needs to come in the form of not just endpoint protection, but being able to do behavior analytics non signature based capability at the endpoint itself in being able to process stuff in the cloud and being able to triage alerts between endpoints and network. So this is all about reducing the signal to noise ratio that comes out into your soft. And XDR takes at one level up.
It says, if you are brought into this vision of reducing the signal to noise ratio from an endpoint perspective, guess what? Next evolution has to be being able to triage across your firewall. The EDR vendors are paving the way for us terms of opening the door and saying, Hey, please come on in Palo Alto Networks, tell them to divide the virtues of not just, EDR, but also how EDR networks work together. We have, thousands of Traps customers. They're natural candidates for us to go to and say, look, you're only Traps customers.
You're already firewall customers. Should be deploying XDR capability, but you'll make the life of your socks easier. I think, we announced we integrated our Cortex XDR APIs into Demisto very well this quarter. So even that is happening. So we are beginning to integrate more and more So yes, we are the door is opening for us vis a vis existing EDR vendors and you can expect us to put more acceleration and more focus and trying to compete with them in hand to hand combat.
At this time, I would like to hand the call back over to Nikesh Arora for any additional or closing comments.
Well, all I want to do is say thank you very much for your time this afternoon. As a reminder, we will be hosting over 4000 customers and partners next week at Ignite this year in Austin, Texas. I look forward to meeting more of you in the months ahead. I also want to give a shout out to all of our employees who've worked really hard this quarter. Say thank you for all your hard work.
And let's keep going. We have Q4 to do. Thanks, everyone.
That does conclude today's conference. We thank you for your participation.