Good day, everyone, and welcome to the Palo Alto Networks Fiscal Second Quarter 2016 Earnings Conference Call. Today's conference is being recorded. At this time, I'd like to turn the conference over to Kelsey Turcotte, Vice President of press release. Please go ahead.
Great. Thank you very much. Good afternoon and thank you for joining us on today's conference call to discuss Palo Alto Networks' fiscal 2nd quarter 20 2016 financial results. This call is being broadcast live over the web and can be accessed on the Investors section of our website at investors. Paloaltonetworks.com.
With me on today's call are Mark McLaughlin, our Chairman, President and Chief Executive Officer and Stefan Tomlinson, our Chief Financial Officer. This afternoon, we issued a press release announcing our results for the fiscal Q2 ended January 31, 2016. If you'd like a copy of the release,
call. You can access it online
on our website. Before going further, I want to acknowledge the inadvertent posting of our earnings press release on our website earlier this afternoon. Call. We have identified this is a manual error and will remediate accordingly so it does not happen again in the future. We'd like to remind you all that during the course of this conference call, call.
Management will make forward looking statements, including statements regarding our financial outlook for the fiscal 3rd and 4th quarters of 2016, call. The spending environment and market opportunity for our products, subscriptions and services investment in and increasing demand for our products call and subscriptions and services from both new and existing customers trends in certain financial results and operating metrics our revenue, billings, deferred revenue and free flow growth rates, sales productivity, seasonality, operating leverage, ability to expand market share and deliver call. Call. These forward looking statements involve a number of risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those call is anticipated by these statements. These forward looking statements apply as of today, and you should not rely on them as representing our views in the future, and we call.
For a more detailed description of factors that could cause actual results to differ, please refer to our quarterly report on form 10 Q filed with the SEC on November 24, 2015, and our earnings release posted a few minutes ago on our website and on the SEC's website. Also, please note that certain financial measures we use on this call are expressed on a non GAAP basis call and have been adjusted to exclude certain charges. For historical periods, we provided reconciliations of these non GAAP financial measures to GAAP financial measures in the supplemental and financial information that could be found in the Investors section of our website located at investors. Paloaltonetworks.com. Call.
For planning purposes, we expect our fiscal Q3 2016 earnings conference call to be held after the market closes on Thursday, May 20 call. We'd also like to inform you that we will be presenting at the JMP Securities Technology Conference on February 29 the Morgan Stanley call. Technology, Media and Telecom Conference on March 1 the Pacific Crest Emerging Tech Conference on March 1 the Raymond James and Associates 37th Annual Institutional Investors Conference on March 8 and the Piper Jaffray Securities Symposium on March 9. Call. In addition, we'd like to invite institutional investors and sell side analysts to join an investor track at Palo Alto Networks Ignite Conference at the Cosmopolitan in Las Vegas.
Call. Our program will start with lunch at noon on Monday, April 4. Formal presentations will kick off at 1 pm Pacific Time. While the call will be webcast. Guests who attend in person are invited to stay for our user conference, which will run through Wednesday, April 6.
Call. To register, please e mail shane@spaloaltonetworks.com or call him at 408-638-3200. Call. And finally, at the conclusions of today's conference call, we will be posting our prepared remarks to our Investor Relations website under Quarterly Results. And with that, I'll
Thank you, Kelsey, and thank you everyone for joining this afternoon. I'm pleased to report that we had a very strong fiscal second quarter. In the quarter, call. Revenue grew 54% year over year to a record $335,000,000 billings grew 62% year over year to $459,000,000 call. Free cash flow grew 93% year over year to $136,000,000 and we reported non GAAP earnings per share of $0.40 call.
I'm very proud of our results for the quarter and the team's continued hard work in delivering on our mission to secure the digital age. Security remains a top strategic call. We are also pleased with the progress we have made in the past several years. We are also pleased with the progress we have made in the digital age call. With this backdrop, it is evident from our results that we continue to capture mind share and market share at very high rates as we ownership.
We are unique in having this platform and as a result customers are standardizing on Palo Alto Networks as their security architecture. We see call. We continue to see this in new customer additions, continued strong lifetime value growth and rapidly accelerated adoption of our subscription services. In Q2, we added close to 2,000 call. We are proud to now be serving over 30,000 customers across the globe.
Some examples of wins in the quarter include becoming the advanced endpoint protection standard for 1 of the world's largest consulting and business services companies where we replaced McAfee, replacing Checkpoint in a very large U. S. Retailer call for both data center and in store security and beating Cisco as a standard for company wide security at 1 of Europe's largest agricultural producers as well as at one of the Middle East's largest government agencies. Our technology differentiation and best in class customer satisfaction is also reflected in the call at a minimum of $11,400,000 in lifetime value compared to $7,400,000 in the prior year period. Also as an indication of the rapid call.
In addition, we have a strong cash flow of our top 25 customers made a purchase in the quarter as they continue to invest in the platform. The consistent increases in lifetime value demonstrate that not only our customers adding more of our products into their architecture, they call. We're also quickly accelerating adoption of the recurring revenue subscription services that maximize our prevention posture. The result is strong momentum across our hybrid call. For example, as of the end of the second quarter, we now have over 9,000 customers use wildfire, including over half of the Fortune call.
We saw the fastest ramp in sales in our history for a new service on our platform with Autofocus. We had another very strong quarter and our largest quarter ever for Traps where sales and new customer additions continue to validate the power and prevention capabilities that come from our platform approach with protection at all stages of the attack lifecycle from the network to the endpoint. We continue to expand our presence in the data center and service provider market with both our PA-seven thousand and fifty chassis as well as our new PA-seven thousand and eighty chassis. We also had the largest quarter to date for Palo Alto Networks addition for NSX, the joint solution of our VM Series in VMware's NSX. Our success here demonstrates our unique platform capabilities in the cloud.
And as we mentioned last quarter, we now serve well over 1 1,000 customers who utilize our VM Series offering. Finally, we substantially expanded our presence within an existing customer, a large financial services company, where we became the security standard for their software defined data center strategy in which almost all of our services were adopted. Call. Our plan to drive high growth, capture market share and have all companies adopt all of our platform capabilities is working. In fact, in Q2, we saw faster adoption of the subscription services capabilities of the platform than we anticipated.
And our second half pipeline review at this stage indicates continued strong adoption of our entire platform, especially subscription services. Very few companies have been able to sustain this level of growth at our scale and we know the effort it takes to call of results that consistently outpace the competition. Our go to market capabilities in demand generation, field marketing, sales, partnerships and customer support are world class. I was particularly pleased and proud of the fact that in the second quarter we were recognized by JD Powers conference and the Technology Services Industry Association for exceptional support services, further evidence of the team's commitment to delighting our customers, which results in a strong announcement with Proofpoint. We have teamed up to share intelligence on sophisticated attacks, enabling the creation of automated and coordinated protection across our next generation security platform and Proofpoint's targeted attack protection and social patrol capabilities.
As we look forward, we know there is concern on the macro environment. Call. While we do of course monitor that closely, some observations earlier in the quarter are that our customers continue to indicate that security is issue and hence a priority spend category in calendar 2016. Our pipeline is at a record high. Our executive briefing center continues to run call.
And our partners and sales teams around the world are well trained in proving that a true platform allows customers to not only have a superior security posture, call, but also superior ROI, total cost of ownership savings since the platform simplifies their network and results in fewer vendors. Also, I'd like to welcome call. With more than 30 years of business and financial experience, including his current role as Executive Vice President, Operations and Chief Financial Officer of Red Hat as well as his previous role as CFO of Cisco, Frank brings a wealth of experience and a unique perspective to the Board and we're very happy to call. We look forward to seeing you at RSA next week and at Analyst Day in early April. And with that, I'll turn the call over to Stefan.
Stefan?
Thank you, Mark, call. And thank you all for joining us. I'll start by first covering the results for Q2, then we'll describe the business trends and the financial model, and we'll conclude with Q3 guidance and modeling points. I'd like to note that except for revenue figures which are GAAP, all financial figures are non GAAP unless stated otherwise. Call.
Q2 total revenue grew 54% over the prior year to reach a new record of $334,700,000 The geographic mix of revenue for Q2 was 68% Americas, 19% EMEA and 13% APAC. Compared to the prior year, the Americas grew 56%, EMEA grew 38% and APAC grew 67%. We saw broad strength across a wide range of verticals and did not have any customer concentration. The 3 components of our hybrid SaaS model product, subscriptions and support all grew well in Q2. Q2 product revenue of $169,900,000 increased 47% over the prior year.
Growth was healthy across our product portfolio. In In particular, the PA-seven thousand and fifty and PA-seven thousand and eighty chassis continue to help accelerate growth in the high end data center market. Call. Recurring services revenue of $164,800,000 increased 62% over the prior year and accounted for a 49% share of total revenue. Call.
Looking at the 2 components of recurring services revenue, the first component is our SaaS based subscription revenue of $84,300,000 which increased 68% over the prior year. Support and maintenance revenue, the second component of recurring services was $80,500,000 an increase of 55% over the prior year. Call. Billings in Q2 were $459,000,000 an increase of 62% year over year. Total billings callings for the first half of fiscal twenty sixteen were $847,000,000 and grew 62% year over year.
First half product billings were 3 100 were $281,300,000 and grew 77% accounting for 33% of total billings. Renewal rates remain high call and contract duration modestly increased to just over 2 years. Total deferred revenue grew to 928,800,000 call in Q2, an increase of 73% year over year and 15% sequentially underscoring the power of our hybrid SaaS model and increasing visibility into revenue streams. Total gross margin for Q2 was near the high end of our target range at 77.2%, a decrease of 60 basis points compared to last year and a decrease of 70 basis points sequentially. Product gross margin was 76.4%, call, a decline of 70 basis points year over year and 30 basis points sequentially.
The sequential decline was due in part to product mix. Call. Over time, we expect there will be fluctuations in product gross margin. Services gross margin for Q2 was 78.1%, a decrease of 60 basis points year over year and 90 basis points sequentially. The sequential decline was due in part to investments in wildfire and autofocus call as well as customer support.
Total headcount at the end of the quarter was 3,343 up from of 2998 at the end of the prior quarter. We continue to thoughtfully add talent across the business as we scale to support our growth. For to $37,500,000 The increase was primarily due to headcount. Sales and marketing expense for Q2 was 43 point 7% of revenue increasing approximately $16,000,000 sequentially to $146,100,000 This was primarily due to our strong Q2 billings performance and the associated sales commissions. G and A expense for Q2 was 5.4 percent of revenue, call increasing approximately $400,000 sequentially to $18,100,000 In total, Q2 operating expenses were 2 was $201,700,000 or 60.3 percent of revenue.
Q2 non GAAP operating margin was 16.9%, call representing growth of 450 basis points year over year and 20 basis points sequentially. Net income for the quarter was $36,300,000 or 0.40 dollars per diluted share using 91,700,000 shares compared with net income of 16,900,000 dollars per diluted share in Q2 2015. Our effective non GAAP tax rate for Q2 was 38%. On a GAAP basis for the Q2, net loss was $62,500,000 or 0 point 7 $2 per basic and diluted share. This compares with the Q2 2015 GAAP net loss of $43,000,000 or $0.53 per basic and diluted share.
We finished January with cash, cash equivalents call. The accounts receivable balance was $254,400,000 in Q2, up from 100 $6,400,000 in Q1. DSOs decreased sequentially by one day and increased year over year by 9 days to 61 days. Call. With the Q2 recap completed, I'm now going to provide some perspective on the momentum we've been seeing in the business year to date call and an update to our target model for exiting Q4 fiscal 2016.
We have been and we remain committed call to driving growth and profitability. And the growth engine has never been stronger as evidenced by new customer additions, expansion in current customers and continually increasing sales productivity. Billings, revenue and deferred revenue are very robust and have far exceeded the rate of the market growth and our competition. Call. With our hybrid SaaS model, we have delivered top line growth with expanding non GAAP operating margins and generated significant free cash flow.
Customers are increasingly buying all elements of our platform, which has been our strategy and has long term benefits for our financial model. Call. As a result, we're in a good position to exceed our internal sales expectations, particularly in the rate of services adoption, which you can see in the billings mix, which is now 63% of services for the first half of fiscal twenty sixteen compared to 58% for the first half of fiscal twenty fifteen. Call. Overperformance in billings, which drives the mix towards ratable services means higher deferred revenue and higher free cash flow.
Call. It also means incurring 100 percent of the commission's expense in period against the higher ratable revenue and as a result slower near term growth rate call of non GAAP operating margins and EPS. As we head into the second half of the fiscal year, our pipeline is at record levels call and indicates strong year over year growth in product billings and with a faster rate of subscriptions adoptions, the pipeline indicates continued over performance in services billings relative to our original forecast. For this reason, we're making 2 updates to our full year guidance. First, given the timing mismatch of higher services billings and ratable revenue with higher in period commissions expense, call.
We now expect to exit Q4 at approximately 18% to 19% non GAAP operating margin, which represents approximately 400 basis point to 500 basis point increase year over year. Call. And because of the over performance on billings, we are increasing free cash flow margin estimates to approximately 40% for Q3 and Q4 of fiscal 2016. We continue to refine our target model, which will call for increasing our long term profitability targets call and we look forward to sharing it with you at our Analyst Day on April 4. With less than 10% market share in an $18,000,000,000 total addressable market, call.
Barring any systemic macro issues, we are well positioned to continue to deliver strong top line growth and profitability. Now turning to the fiscal quarter guidance and modeling points. We expect revenue to be in the range of $335,000,000 to $339,000,000 which represents 43% to 45% growth year over year and we expect non GAAP EPS to be in the range of $0.41 to 0 point fee to 92,000,000 shares. We are starting to see some moderate seasonality in our business with fiscal Q2 and Q4 showing our strongest sequential revenue growth. Call.
And we continue to expect CapEx for fiscal 2016 to be in the range of $85,000,000 to $90,000,000 which includes investments in infrastructure, cloud services and facilities to support the growth of our business. With that, I'll turn the call back over to the operator for Q and A.
Call. Thank you. The question and answer session will be conducted electronically. And one follow-up question. And our first question comes from Sterling Auty with JPMorgan.
Call. Yes, thanks. Hi, guys.
I know you mentioned the momentum in
the business, but you're right, everybody is very Concerned about the macro. Can you give us maybe a little bit of color by some of the major theaters, Europe versus North America? Are you seeing any lengthening sales cycles or anything else to be concerned about from the macro side?
Hey, Sterling, it's Mark. A couple anecdotal points here. 1, in the quarter itself, we have January And the linearity for the quarter was exactly the same as historical precedent. So we didn't see anything happen in the quarter that would Raise any concern around that. I travel around all the time myself globally.
I had the chance in January to be not only in Europe, but in Asia as well. And And all the places that I went to, the customers that I talk with, that the security remains a priority spend item for them as well. So we haven't seen anything to indicate that what we're seeing in the stock market means anything about the macro economy yet, but we always watch that closely.
Call. Got it. And then one follow-up. On the product gross margin, can you maybe give a little bit more color there? You mentioned the mix, but in the prepared remarks, You were kind of highlighting the higher end solutions is having particular strength.
I would expect that to be good for product gross margin.
It is good for product gross margin. But remember, as I've highlighted in the past, whenever we come out with a new chassis or a new product, there's usually a slightly Impressive effect on near term product gross margins because we haven't achieved volume. So, COGS are a little bit higher than they will be on a go forward basis. That's definitely true with the seventy-eighty, which was introduced relatively short time ago. So even though we saw a very strong contribution from our higher end products, there was a slightly depressive effect, until we get to scale.
And our next question will come from Karl Keirstead with Deutsche
Thank you. Stefan, if we could go to the 4Q operating margins and the decision to lower the guide somewhat. I just want to make sure I understand. I feel like Palo Alto Networks has been over performing on the billings actually for several quarters now and you've been able to meet roughly the non GAAP operating margin guide and expectations. So What's changing in 4Q?
Is it that you expect a particularly strong billings performance as a result of a good subscription attach or maybe some other element in the model changing that sort of didn't give you the lever to offset it? Maybe a little color would be helpful. Thank you.
Call? Sure thing, Carl. What we're seeing is customers adopting all elements of our platform, which is very positive for us. In fact, the attach rate That's right concept that we've introduced over the last few years is becoming less and less relevant mainly because now we We have 7 subscriptions that we are selling and the 3 of the newest ones are Traps, Autofocus and Aperture. So with The adoption of the overall platform, we are looking at outsized billings numbers, and that's driving incremental billings.
So because those subscription services are effectively call. Deferred revenue and they become ratable revenue. We have 100% of the commissions period 100% of the commissions that we are getting in period. Call. So with the mix shift happening, that's what you're seeing.
And so kind of bridging from, call it, 22% at the low end of our range to roughly 18% to 19%, The vast majority of that is commissions and there's a little bit relative to the mix.
Helpful color. Thanks a lot, Stefan.
Yes.
And our next question will come from Rob Owens with Pacific Crest Securities.
Great and thank you for taking my question. So if we look at the billing strength, you did see A shift to more long term contracts. And is that just a function of the environment right now, people are locking in? I would think given the speculation of weakening things will be going the other way. So just a Things will be going the other way.
So just a little color. And I realize it was a modest extension duration, but your long term did show some nice outperformance relative to expectations.
Call? While we are seeing customers standardizing on our platform, they want to go with multi year. The net effect of that for contract duration was actually call. Very de minimis, just a modest uptick. If you look at the actual dollar growth from a short term deferred revenue standpoint.
Short term deferred actually grew more in terms of dollars than long term. So we're seeing a nice pickup in both short term and long term. But to your broader point, customers want to standardize on the platform of choice and they want to be locking in for a number of Yes, that's all good for us.
Yes, Robin, this is Mark. And that's exactly what we've always wanted to occur. We hope to continue to drive that, in the business where call. Folks are making these architectural decisions in Palo Alto and they're I think the market's really starting to realize that the more the prevention capabilities that they adopt, the better the prevention gets and you
And for my follow-up, I just want to touch on the partnership with Proofpoint. And I guess at a higher level, the call. Threat Intelligence or as a solutions vendor, is it a given that your product should inherently lever this knowledge to increase efficacy?
That's a great question, Rob. And I get that from customers all the time. So big picture is the way that we monetize intelligence is in the platform itself. The platform is a high proactive prevention capabilities and the more intelligence we have in the platform, the better job we do with that. So with that in mind, we have an insatiable Desire for Threat Intelligence and being able to partner up with Proofpoint to have everything they're seeing from an email gateway perspective is beneficial for us and vice versa call.
Really interesting, when I'm talking to customers, I have a lot of customers who are telling me that they think the day of Security vendors trying to monetize intelligence is long over and they're very upset with security vendors who come in and try to sell them intelligence as a service where they're trying to monetize that. And I think that's going to change pretty rapidly into the future where you just better be able to take intelligence and put it Your platform and do for your products and do something with it for the customer and that's where the value proposition will lie.
Call. And our next question comes from Michael Turits with Raymond James.
Hey, guys. Although obviously with that mix shift call. Less than the expected EBIT margin on the exit rate, but really strong guidance at the 40% of free cash flow margins. Call. So two questions.
One, if we look out long term and I know you said that you'd addressed that at the Analyst Day, do we return to kind of reasonable amounts growth in the EBIT margin? And also, is there anything unusual in those 40% free cash flow margins? Or is that sustainable?
And is that something we should see expansion in?
Call? Well, as we indicated in the prepared remarks, longer term, this business will generate much higher EBIT margins, as we We call them operating margins here, over the longer term for sure. What the dynamic that you're seeing now is given that there's more Adoption of services and you have higher services billings, because of the commissions expense being hitting in period, as the revenue is coming off the balance That's going to be accretive to margins down the road. So this will be a building margin story. I think one of the most important things which you highlighted, Michael, is we This grew free cash flow 93% year over year and we're basically looking at very high free cash flow margins.
Many companies have a correlation, a near term correlation between operating margin and free cash flow. If operating margins are coming down on a growth rate basis, This free cash flow typically comes down. That's not the case with Palo Alto Networks. Because of our powerful hybrid SaaS model, call. We are actually delivering much more free cash flow than operating margin, and we feel very good about the overall growth engine in the business.
So as I said, just by the follow-up, just to clarify anything, it's strong, but I mean, as we look forward, is there anything that is one time of call. In those 40% free cash flow margins, Wendy, what happens with cash taxes? How should we think of that trending over time to the extent you can out there?
Yes. We'll give you more color commentary on the convergence of free cash flow margin and operating margin call it the next at least 3 years, there should be a pretty wide creation, positive separation between free cash flow and operating margins. Over time, those numbers will converge because we will become more of a cash taxpayer, call. And that will that plus a couple of other things will see the spread narrow. But for the foreseeable future, there should be a pretty wide spread between free cash flow and call.
And operating margin.
Michael, it's Mark. There's no one time aspects in the free cash flow numbers you're looking at right now.
And our next question will come firm, Andrew Nowinski with Piper Jaffray.
Thanks a lot and congrats on
the nice quarter. Call. Maybe just to start, I had a question on product revenue. So it was up 47% year over year, which was not only an acceleration from last quarter, but also one of the strongest growth rates we've seen call with the exception of fiscal Q4 of last year. So but your total customer count continues to go up by about the same amount in that within your platform.
Yes, Andrew. Yes, you can see product growth or platform growth generally, right? And product growth since that was your specific question for us and that continues to drive the entire platform including products. So that's very healthy. The second thing is expansion inside call.
The existing customer base, as we get bigger and bigger, more and more of our business will come from expansion opportunities over instead of the or in addition to the land opportunities, expansion is going very nicely as well. And then the third is, we're growing a very large base of business As far as customers, all with products and all of whom at some point will refresh those things. When we think about what that can look like into call. The future, using sort of a 5 year rule of thumb on refreshes that would take us back basically to 2011 cohort. We had it up to 2,009, 2010, 2011, it's call 4,000 customers total across those 3 cohorts, which means there's 26,000 more after 2011.
And when we throw in close to 2,000 customers a quarter on top of that. That's a gift that just keeps giving into the future.
Great. Thanks. And then just a follow-up. If we go back to your comments in fiscal Q4 last year, you said that traps would be a material contributor to revenue in FY 2016. I'm wondering if you could put any parameters around that in terms of what we should expect No, now that we're in the back half of the year.
Yes. So what we said was
we thought it would be like a more material contributor to the overall business and we've seen that. We've seen a record quarter for Traps in terms of billings. However, because it's subscription based revenue model, revenue will be coming off the balance sheet coming into the P and L. So, that is more of a future growth driver for top line revenue. It's definitely been a more meaningful growth driver for billings, but it's coming off of a relatively small base.
So we feel very good about the endpoint business. It completes our helps complete our platform story. Call. And we'll give you more color at Analyst Day about customer counts and that sort of thing, but there's been very nice traction there.
Call. And moving on to Philip Winslow with Credit Suisse.
Hey, guys. This is Siti Banigre for call. Congrats on another awesome quarter. I just wanted to drill into the subscription business. Good to see call.
Solid growth there. Last time you gave subscription attach rate around $2.2 per box. Just wondering if you have any update on that what you're seeing there? And also, one of your new subscription, just wondering what kind of feedback you're getting on auto focus? That will be great.
Yes, great. This is Mark. On the attach rate side, attach rates are good and growing. We'll give you more color around that at Analyst Day in about 35 days or so, but I think, detachments continue to do very well. And then on the new services, which are in the order of The history there Traps, Autofocus and Aperture Traps, Stefan just spoke to continues to very nicely for us.
Autofocus, you may have heard, I mentioned in my prepared remarks. We've enjoyed the fastest sales ramp in the history of the company for new service with auto focus. So there's great demand for that and a very strong pipeline for Aperture as well as people continue to get interested into the CASB space for a third party applications. And just one hearkening back to the attach rate thing as Well, we'll discuss this in more detail at Analyst Day. As we continue to have more services that don't have attach rates on them.
We'll talk through how that impacts the concept of attach rates, but I think it become increasingly irrelevant to the business over time. We're thinking more in terms of billings or subscription billings on those services because it's how much dollars it comes in, it really matters.
Got it. Thank you.
Call. And our next question will come from Matt Hedberg with RBC Capital Markets.
Call. Yes, guys. Thanks for taking my questions. Another one on Traps. It sounds like there was a nice MACVAV replacement in the quarter.
I'm curious, do customers normally replace their antivirus solution completely with the Traps install? And I'm wondering, if you could talk about the drivers for adoption versus legacy solutions. Is it cost? Is it better prevention? Or maybe a combination of the 2?
Yes, Matt. It's way more about security than it is about cost. So folks are more and more realizing that if you're thinking about security and prevention, which is what they want to do, where the data is a lot of data is at the endpoint and that's one of the easiest ways to get into the network as well as AV continues to be less and less relevant there for them. So on your first question, folks, want to I think more and more want to replace AV, not because so much Just want to have security that would actually work for them. In the cases where we've seen people who said, I have to have or really want to have, it's become more and more call.
Places that have to do that for compliance reasons or audit reasons, then they're doing something additive, on top of that. But the primary driver there is The other interesting thing that we hear a lot and it's really analogous to where we started in the firewall space, and And all the other components that made their way into networks over time because stateful inspection firewalls weren't working for them as they built more and more Complexity of the network is the same thing on the endpoint. So people are they're not interested to add one more agent onto the endpoint. They have a lot of them there. So the same kind of Simplification for better security that would result in better total cost of ownership, but primarily simplified on the endpoint with better security is a driver and it's very analogous to what we saw when people said, hey, I don't want firewall plus, plus, plus, plus, plus, plus, right?
They want the simplicity of network and for security. So it's working just on the endpoint as we thought it would, and we have a lot of experience in selling that kind of concept from our network genetics.
That's great. And then I think you called out the 70, 80 box in the prepared remarks. Could you talk about some of the performance benefits there versus some of the other high throughput boxes? And how are you holding up under pressure now that they're under increased traffic call? Now that you've got some more history there.
Sure. Well, the 7,080 first, so everybody knows that's our latest chassis. It's a 200 gig throughput. It says, 10 slot cards in it, right? So that's what it looks like.
And it's pretty exciting in the data center and service security capabilities that Palo Alto is known for now from a prevention perspective. So you get the best of both worlds with all those prevention capabilities and increasingly higher throughput, with none of the degradation of performance that you get with stateful inspection firewalls when you have to turn on various concepts that really reduces those throughput. So one of the favorite angles for our competitors is to talk about faster and faster and faster stateful inspection firewalls, partially because They have to because every time you turn on one of these other cobbled together capabilities for IPS or filtering or APT or something like that, it seriously degrades the performance in the first place. And that's something that we don't experience because we have a single throughput engine. So we've gotten really call.
And moving on to Keith Weiss with Morgan Stanley.
Call. Hi, great. This is Martha Guarlem calling in for Keith. Mark, I just have a high level question. So the growth is clearly pretty impressive or call.
Very impressive on the billings line. And if you look across the universe, it seems like some of your peers are seeing decelerating growth. So It does seem as though potentially your share gains are accelerating. Is that the right way to think about it? And How much runway do you think that you have in terms of share gains within the core network security market?
Yes, it's a great question, Melissa. Couple of angles or ways Think about that at least the way we think about that. If you start with the size of addressable market, as you know, is very big and, us at high single digits still are about 10% market share. There seems to be a lot of runway from an addressable market opportunity capture perspective. And then inside of that, who's capturing what, Right.
So there's money here. It's up for grabs. Yes, I did a simple math experiment the other day just because I saw some third party numbers on market share. They tend to be kind of confusing to me because it's really hard to tell who's doing what there. So what I did was I took 5 vendors to follow-up the network Cisco, Check Point, quarter.
And using the last calendar reported quarter, meaning this one for us in their 4th quarter, for everybody in the 4th quarter, I added up the year over year increase in revenue across all five of those vendors. And the total amount of new revenue across all five of those vendors is about $300,000,000 That's the total, right, pie in it, everybody added. And inside of that, Palo Alto was about $120,000,000 of the $300,000,000 right? The average is 58, if you do it roughly 58, if you did math. So we're about 120 of that, right?
So and I can give you the other numbers, care about that. But I think it's very obvious that we're taking share from everybody in the space in order for those kind of numbers to work out that way.
Call. Okay. That's actually that's really helpful. And then just one quick one on the federal opportunity. There's definitely more of a push call from the administration on enacting cybersecurity laws and also incorporating more into the budget.
And I know there's nothing Certainly concrete today, but can you just give us a high level overview of what you're seeing in terms of federal traction and then, what you're expecting in terms of growth?
Call. Yes, our federal business is good and growing. So it's a market we like a lot, not surprisingly given what we what our does and what the government more and more needs and recognizes that they need. A couple of things that are interesting, you noted that, I think you're call. Noting that recently President Obama came out and called for a 40% increase in cybersecurity spending.
You will see what happens with that. That's a request, not an Great. So we'll see what happens with that. But if obviously if there is that amount of spending there, it's $5,000,000,000 of additional dollars that comes into the federal budget Specifically for cybersecurity. And on the same day he announced that the Director of National Intelligence said, that cyber Security is the number one national security issue facing United States.
So I think the amount of attention from the government on cybersecurity is call very, very high and could even be higher. But more interesting than that, they're really trying to put their money where their mouth is here with some of these announcements of what we have to do We're going to take legacy architecture across the federal space and get it into next generation platforms that could really do prevention.
Call. And the next question will come from Ryan Hutchinson with Guggenheim.
Great. Thank you. Stefan, my question is on billings. I know you don't give guidance, But one way to look at it is as a percentage of revenue. It stands at 130 7%, which is the 2nd highest ever outside of Q4 of last year.
So given we're going into the seasonally weak period, obviously offset by some subscription attach rates in this platform play you've alluded to, Is this trend sustainable? Any color there would be helpful because basically you can look at this one of 2 ways. If it trends back towards more of an average of where you've been over the last 8 quarters, billings will be down sequentially. You look at the other way, the trends flat to slightly Flattish, let's call it. Billings actually could be flat to slightly up.
So that would be my question.
Okay. Yes. So call? Because we don't guide on billings, I can just give you kind of directional commentary. It would be candidly be It surprised us if we went backwards on billings on a sequential basis.
The power of the platform, the pipeline that we have, you look at how the setup is for Q3 and Q4, even though we're in a relatively seasonally weak quarter in Q3, call? We are still looking for growth. And so that would be my answer. I can't give you a rule of thumb relative where billings and Revenue is, but with more subscriptions being adopted and I'll parse that out, more being attached attached and then more of the 3 subscriptions that we're selling without being attached, there should be good growth there.
Call. Okay. So it will grow sequentially is what you're telling us?
Directionally.
Thank you.
Call. And the next question will come from Erik Suppiger with JMP Securities.
Yes, just first off on the duration. And Stefan, can you give us a heads up on where that was last quarter or the year ago quarter?
Yes. It was just shy Of 2 years, last quarter. And I'd have to pull up with where the year ago quarter was. But there's been a we've been Calling out that there's been a modest uptick in duration. But quarter on quarter, we're talking call?
It's measured by in a couple of months type of thing. So not a very big move up call duration.
Okay. And then on the services growth, is that driven more by the installed base going back and upselling or is that equally driven by new products going into new customers?
It's It's a combination of both. But what I can tell you is we've seen a fantastic opportunity going back into our Install base, selling them more elements of the platform. They're adopting a lot more subscription services than they have in call. Yes, we're very pleased with the question. Given the fact that we have, call it, 30,000 customers are heading into this quarter, we had about 28,000 customers.
Call? The pie is much bigger there than the new customers that are being brought into the fold. So the expansion opportunity call is definitely bigger than the new opportunity. The up sell and cross sell that we are able to do is a testament to our go to market functionality that we put in place with Mark Anderson leading the charge there. Call.
We've been able to really put in programs to monetize the accounts.
Call. And our next question comes from Jonathan Ho with William Blair.
Hey, guys. Congrats as call on the strong quarter. I just wanted to understand, you guys talked a little bit about strength in your NSX business. And I just wanted to get a sense from you or some additional color in terms of what will be driving this as well as maybe what you're seeing in the data center market?
Hey, Jonathan, it's Mark. Yes, something we've seen for a while and I've mentioned call. Is that when customers are thinking about security, they're thinking less and less around topology and more around data and prevention, right? So what they want Do is make sure that they have this best prevention postures they can have wherever the data is. So when you think about where data is going, a lot of More and more a lot of it is going into public private cloud environments and next generation data centers, right?
So when that's where it's going, we want to make sure it's secure. And that's I think partially what's driving a lot of strength in NSX itself, right. And then with our relationship with VMware, with the integration of VM Series in there, the better and better that they're going to do in that space and they've been reporting pretty good numbers there. That's a Great opportunity for us as far as where we can hunt along with them to provide the security.
Got it. And then can you talk a little bit about sort of the investments that you're making on an international basis, whether you're sort of pleased with the performance that we're seeing out of EMEA and APAC and just sort of what you think those regions, the potential could be over time?
Yes. We're pleased with the international performance. You can see, If I back away from that for a minute, just the North America, which is continued powerhouse for us. So it's fantastic to see business Besides North America has continued to grow at the rates that it's growing, I think that just shows how much demand there is still in a mature market for Palo Alto with single digit Market share. And then when we look internationally as well, we're seeing strong international growth.
You can see in our numbers, we had a very strong quarter in APAC quarter over quarter or call. Year over year and we also had a good quarter in EMEA as well. As we continue to make investments in various areas, call. We expect to continue to grow these businesses and our market share in those markets is even lower than it is in North America today. So there's even more upside.
Call. And our next question will come from Fred Grieve with Nomura.
Hey, thanks guys. First up, going into RSA, can you discuss customer interest in wildfire versus traps? I know for a few years, APT has sort of been a top priority for CSOs, But is there any chance you're seeing this shift towards the endpoint this year?
Yes, Fred. I think I'll make Make a prediction. It's RSA and it's always dangerous to make predictions. But I think you're going to see at RSA this year a lot more folks than just call. Palo Alto talking about prevention.
Last year we were talking a lot about platforms and people came around to that thinking right away from a marketing perspective. And I think you're going to see a lot more people trying to market around prevention now that we've shown that that's the right approach to this philosophically. And when you're doing prevention, you Have to do it everywhere, right, wherever the data is, as I was saying a little earlier. And I think there will be a lot of focus on endpoints given that prevention historically has been pretty weak there and that's why people are adopting Traps so rapidly. So I would expect that to be the case.
On the wildfire side, while thinking about advanced persistent threats and threats and How do you take an unknown threat and turning it into a known threat? That's as relevant as it ever has been. It's probably going to be incredibly call into the future because it's the unknown threats are the ones that are going to get you and that's why people are adopting wildfire so rapidly as well.
Call. Got it. And then maybe can
you provide a little bit
of background on why it made sense to partner with Proofpoint instead of bringing to market your own solution?
Call? Well, proof points in email are primarily email security company, right. So what they're sitting in front of an email server or gateway with their technology, And that's messaging security. So if you parse out the whole security industry, messaging security is separate from traditional network We're just in different markets with very complementary capabilities. Things that come through email are interesting to us from a threat perspective because sometimes call.
1st place you see something and lots of there's obviously a lot of phishing attacks and things like that. So getting the ability call. They gather the information from a threat perspective from somebody like Proofpoint and put it into Wildfire makes Wildfire very powerful. On the flip side for them as well, Everything that we're seeing from endpoints and networks that are related to threats that they in turn can use to make their technology smarter about the threats as well makes sense too. So it's a very symbiotic relationship.
Call. And next question comes from Gur Talpaz with Stifel.
Great. Thanks for taking my question. So as customers migrate workloads into call. Public cloud, have you seen any sort of pickup in interest for the VM Series for AWS? And then I guess more broadly speaking following up, how call.
How do you feel about AWS and public cloud adoption more broadly impacting your business? Thank you.
Hey, Greg. It's Mark. Yes, so for AWS, I I think we mentioned on the last call that, we had well, on this call, we mentioned we had over 1,000 of our customers and growing using our VM Series, right? So start with that The baseline. And then the VM Series capability in use and integrated in different places is Growing well too like NSX in a private cloud environment.
I think last quarter we said we had over 100 customers currently using our VM Series and W. S. And that's growing too and we'll update you all that on those kind of things at Analyst Day. So what we're seeing again is folks saying, where is my data? I need to protect it.
And we don't want security to be an inhibitor about where the data can be. So if it's going to the public cloud and workloads, a lot of time developers just put it up there and the security guy doesn't even know about it yet, right? Those are the kind of things that worry security people. So I want to make sure call. They want to make sure that they can secure those things.
On the general question of AWS as a platform versus security, AWS is doing We'll do a lot to secure the platform itself, right. But from a security perspective of things like applications and network connections back to the ones who are consuming this stuff, the enterprise who are consuming this stuff. That's not something that they do and I doubt that they will because that's where companies like The networks have spent a decade honing prevention capabilities and that's why having our capability in AWS is very powerful.
Call. And next will be Gregg Moskowitz with Cowen and Company.
Okay. Thank you very much. Mark, I'd like to go back to your comment on Autofocus being the fastest ramp of any Palo Alto subscription. My understanding is it's sold per security operator. And because of that, I was always wondering how big would this market be?
Conference call. Would it just be relevant to a fraction of your very high end customers? So is the strength that you saw mostly a function of high ASPs? Or are you also seeing pretty broad customer uptake out of the gate? Anything you can do to sort of help size the autofocus opportunity would be helpful.
Yes, sure. So if I back up for a second, just say call. AutoFocus list price for that is $35,000 a year per operator, right? So think of this as a tool that an operator would look at and get highly correlated relevant intelligence that can give them things to do proactively call about threats in their network based on everything we're seeing from 30,000 plus other networks today and growing. So that's what it is, right?
Call. The price point today. As I noted that is the fastest growing service we ever had, which is fantastic. I think the appetite for people to want to do proactive prevention is very high and the ability to bring that kind of hardcore, correlated analytics to bear is Interesting. It's been interesting, to large companies and medium sized companies as well.
So what we've seen so far in selling is that people understand it very quickly. Now call. In the base of customers, large companies are going to have a lot more operators than small companies. So we've scene and we expect to see some companies will buy one of them from a license for one of them for 1 operator and larger companies will buy multiple license for multiple operators. Call.
So the early view on this is it's got a very wide applicability.
And our last question will come from Jason Noland with Baird.
Call. Okay. Thanks for fitting me in. Mark, I wanted to ask about non perimeter defense. Paolo has And network segmentation gateway, others have talked about their internal segmentation firewall.
What are your thoughts on this market today? Should we expect down the road?
Yes. I think segmentation is very important and customers want to do that. I think they're going to try to do it and rightfully should do it everywhere they can. So they may do segmentation on internal networks from a user perspective and segmentation of data on externally facing servers and data centers. And that's a good idea.
Yes, really I don't think there's any correlation between the 2 from how many what are your needs internally versus what are your needs going to be externally. There's correlation about doing more in one area is going to reduce it even others. It's just a good hygiene idea to do segmentation wherever your data is. And the more they want to do in the internal that will drive internal business and more they want to do external drive the external business. But I wouldn't think of that as an either score.
I think that is both.
Okay. And then as a follow-up, you mentioned the 7 subscription modules earlier. Call. In Cal 16, is the focus on ramping some of these newer modules versus launching new modules?
So what you've seen us do The past is being thought like we think we're thoughtful hopefully you would agree with this, but being very thoughtful from a platform call. That does prevention as to what should be in the platform, right? So we're not attempting to roll up the security industry just to have a lot of stuff. What we are Trying to do is to make sure that when we think about the ATTCK lifecycle and every chance we can get to interdict an ATTCK before it can ultimately be successful across lifecycle. We have a very good and increasingly better and better and better prevention capability every one of those points.
And that's really the philosophy that's driven the company and our entire roadmap over last 10 years and will into the future. So we would expect that we will have more services later as the attack landscape changes and we definitely want to make sure that we are wherever the data is going to be.
Call. And that does conclude the question and answer session. I'll now turn the conference back over to you for any additional or closing remarks. Call.
Great. Well, thank you everybody for joining us this afternoon. I'm really excited about the future and I'd like to thank our customers, partners and the whole CalAtlantic Networks team call. Our hard work to support Q2. And we look forward to seeing many of you at Analyst Day in April.
Thank you.
Call. Thank you. And that does conclude today's conference call. We do thank you for your participation today.