Fortinet, Inc.

After the speaker's presentation, there will be a question and answer session. To ask a question during this session, you will need to press star 1-1 on your telephone. You will then hear an automated message advising you your hand is raised. To withdraw your question, please press star 1-1 again. Please be advised today's conference is being recorded. I would now like to hand my conference over to your speaker today, Aaron Ovadeva, Senior Director of Investor Relations. Please go ahead.

Thank you and good afternoon, everyone. This is Aaron Ovadia, Senior Director of Investor Relations at Fortinet. I am pleased to welcome everyone to our call to discuss Fortinet's financial results for the fourth quarter and full year of 2024. Joining me on today's call are Ken Zee, Fortinet's founder, chairman, and CEO, Keith Jensen, our CFO, John Whittle, our COO, and Christiana Olgaard, our CAO and sales operations leader. This is a live call that will be available for replay via webcast on our Investor Relations website. Ken will begin our call today by providing a high-level perspective on our business. Keith will then review our financial and operating results for the fourth quarter and full year of 2024 before providing guidance in the first quarter and full year of 2025. He will then open the call for questions. During the Q&A session, we ask that you please limit yourself to one question and one follow-up question to allow others to participate. Before we begin, I'd like to remind everyone that on today's call, we will be making forward-looking statements, and these forward-looking statements are subject to risks and uncertainties, which could cause our actual results to differ materially from those projected. Please refer to our SEC filings, in particular the risk factors in our most recent Form 10-K, and Form 10-Q for more information. All forward-looking statements reflect our opinions only as of the date of this presentation, and we undertake no obligation and specifically disclaim any obligation to update forward-looking statements. Also, all references to financial metrics that we make on today's call are non-GAAP unless stated otherwise. Our GAAP results and GAAP to non-GAAP reconciliations are located in our earnings press release and in the presentation that accompanied today's remarks, both of which are posted on our investor relations website. The prepared remarks for today's earnings call will be posted on the quarterly earnings section of our investor relations website following today's call. Lastly, all references to growth are on a year-over-year basis unless noted otherwise. I will now turn the call over to Ken.

Thank you, Aaron, and thank you to everyone for joining the call. We are pleased with our strong performance in the fourth quarter, successfully balancing growth and profitability, including record operation margin of 39%, total revenue growth of 17%, including product revenue growth of 18%, our highest growth rate in six quarters, as we further strengthen our market leadership in secure networking. A strong growth in unified SASE and secure operation with security service age building growth of 85%, which drove our unified SASE building growth of 13%, accounting for 23% of our business. The strong unified SASE growth highlights the value that our customers see in our single vendor SASE strategy. We are the only vendor to organically develop the key SASE functionality into a single operating system for TOS. which integrate market-leading next-gen firewalls, SD-WAN, ZDNA, Secure Web Gateway, CASB, DLP, and other innovations, seamlessly unifying networking and security, delivering enhanced user experience, and securing access to applications across on-premises and cloud environments. Using firewalls, an SD-WAN customer can deploy FortiSASI in the cloud or on-premises within minutes. We also enable sovereign SASE for service providers and a large enterprise to host 40 SASE within their own data center, enabling typing control of their data and grid connectivity, while leveraging our 40AC technology to accelerate SASE function for superior performance. Additionally, Fortinet's AI power security, unified management, and single agent approach provide consistent protection across all location and devices, ensuring full control, visibility, and simplified deployment, while also offering industry's simplest licensing and 3x or 5x data performance per user. AI-driven secure operations accounted for 11% of total billing, while ARR grew 32%. We recently enhanced our secure app portfolio by acquiring PerceptionPoint, a leader in advanced email and collaboration security. These acquisitions strengthen our end-to-end cybersecurity by extending protection beyond email to the entire modern workspace, addressing the growing advanced threat risk in today's elevated threat environment. In secure networking, we continue to lead industry with a convergence and consolidation strategy, a vision we have been driven for 25 years. Industry forecasts predict that secure networking will surpass traditional networking by 2026. As the number one secure networking vendor, Fortinet has secured over half of all global firewalls and lead the convergence trend. Also as shown on slide four, Fortinet continues to be the only vendor to leverage a single operation system, FortiOS, across five secure networks in Ghana Magic Quadrant. Customers increasingly recognize that our FortiOS and FortiASIC technology deliver a 5x to 10x better performance than competitors by enhancing security effectiveness and reducing total cost of ownership. This is especially evident in the operation technology where OT cells approached 1 billion in 2024. Today, we introduce the 40-gauge, 30-gauge, 50-gauge, and 70-gauge next-generation firewall and a unified chassis solution designed for SMB and its distributed enterprise with cutting-edge performance and enhanced security delivering up to 5x to 10x faster support and a better threat protection than industry average, and supporting a wide range of security network interface for remote access. In addition, we recently acquired a remining share of Linksys, a leading provider of connectivity solution to expand our enterprise-grade security to employees working remotely, home business, and consumers. Lastly, I'm very proud to share that Fortinet was recently recognized on Forbes' Most Trust Company in America list, ranked number seven overall and the only cybersecurity company in the top 50 list, highlighting our transparency and commitment to our customer as the most trust cybersecurity company. I would like to thank our employees, customers, partners, and suppliers worldwide for their continued support and hard work. And we're now trying to call over to Keith.

Thank you, Ken. Thank you, Aaron. And good afternoon, everyone. Let's start with the key highlights from the fourth quarter. We delivered strong execution and financial performance with top line results above the high end of guidance together with record operating margins at 39%. Total revenue grew 17% driven by strong product and service revenues as product revenue growth pushed up to 18%. In addition, we added a record 6,900 new logos, driven by close alignment with our channel partners. Looking at our financial results in more detail, total billings grew 7% to $2 billion, including double-digit security operations and unified SASE growth. RPO grew 12% to $6.4 billion. ARR growth was very strong for SecOps and grew 32% and Unified SASE, which grew at 28%, to a combined total of over $1.5 billion. Within Unified SASE, SSE continues to gain traction with ARR growth of 96% as we continue to see early success upselling 40 SASE to our large SD-WAN customer base. 40 SASE deals increased over 60%, and the pipeline was up 90%. The typical 40 SASE journey starts with the customer's first purchase of our ASIC-based, market-leading FortiGate firewall, followed by an expansion to SD-WAN, and then to our single-vendor SASE solution. The expansion journey is particularly significant, as over 70% of our large enterprise customers have adopted our SD-WAN functionality and are poised to expand to 40 SASE. Our large enterprise 40 SASE penetration rate increased to 10%. That's up two points just since our November analyst day reporting. Grounding out the building's commentary, deals between $5 million and $10 million increased over 90%. SMB was our top performing customer segment with growth of over 30%. And EMEA was our best performing geography driven by growth of over 25% from international emerging. Among our top five verticals, worldwide government and service provider both grew over 20%, while financial services saw the expected challenge from the difficult year-over-year comparison driven by several seven- and eight-figure deals in the fourth quarter of 2023. Turning to revenue and margins, total revenue grew 17% to $1.66 billion. Product revenue increased 18% to $574 million, our highest growth rate in six quarters, driven by hardware revenue growth of 19%. On a sequential basis, product revenue increased 21% and represents the third quarter in a row with elevated sequential growth. Software license revenue continued its double-digit growth and represented a mid to high-teens percentage of total product revenue. Service revenue of $1.09 billion grew 17% to 65% of total revenue. Service revenue growth was driven by SaaS solutions at 130%, which includes Laceworks, as well as strong organic services growth in Unified SASE and SecOps. Combined revenue from software licenses and software services, such as cloud, Lacework, and other SaaS security solutions, increased 41% and provides an annual revenue run rate of over $1 billion. Total gross margin increased 340 basis points, to 81.9% and exceeded the high end of the guidance range by 140 basis points. Product gross margin of 69.3% increased 920 basis points as inventory-related charges normalized from last year's highly elevated levels, adding 840 basis points to product gross margin and 290 basis points to total gross margin. Service gross margin of 88.6% increased 50 basis points to a quarterly record as service revenue growth outpaced labor and hosting cost increases while benefiting from the mixed shift towards higher margin 40 guard security subscription services as well as some early AI-related savings. Operating margin increased 720 basis points to a record 39.2% and was 520 basis points above the high end of the guidance range reflecting the strong gross margin, an FX tailwind of about 110 basis points, as well as the top-line overperformance that flowed through to the bottom line. Before moving to the statement of cash flows, I'd like to summarize the financial impact from the lacework, next DLP, and perception point acquisitions. These acquisitions increased fourth quarter billings by 115 basis points versus our expectation of 75 basis points, and decreased operating margin by 190 basis points versus our expectation of a decrease of 230 basis points. Looking at the statement of cash flow, summarized on slides 18 through 21, free cash flow was $380 million, and free cash flow margin was 23%, up 11 points. Adjusted free cash flow was $549 million, representing a margin of 28%, up 16 points. Cash taxes were $156 million, down $186 million, reflecting the prior year's regulatory extension of estimated tax payments, while infrastructure investments were $98 million or up $71 million. Average contract term in the fourth quarter was 29 months, down one month year-over-year, and up one month quarter-over-quarter. DSO decreased 10 days, reflecting improved linearity year-over-year. And the remaining share buyback authorization is $2 billion. Moving to an overview of our 2024 full-year results, buildings exceeded $6.5 billion, while total revenue grew 12% to $5.96 billion, driven by revenue growth of around 25% for both Unified SASE and SecOps. Service revenue grew 20% to $4.05 billion, driven by a 22% increase in security subscriptions and 33% growth in Unified SASE services. Gross margin was up 390 basis points to 81.3%, benefiting from the revenue mix shift to service revenue and a 140 basis point tailwind of inventory-related charges normalized during the year. Operating margin increased 660 basis points to a record 35%, resulting in operating income of $2.1 billion, which was up 38%. Our GAAP operating margin at 30.3% continues to be one of the highest in the industry, Earnings per share increased 45% to $2.37. Free cash flow was a record $1.9 billion, representing a margin of 32%. Adjusted free cash flow was $2.2 billion, representing a margin of 37%. If I were to just sum up 2024, I think it's important to note that we have now met or exceeded the rule of 45 for the fifth consecutive year. Now I'd like to share a few significant fourth quarter wins showcasing our SASE expansion and our leadership in operational technology. In a seven-figure new customer win, the healthcare provider strategically included 4D SASE in its first four-net purchase alongside SD-WAN while replacing a competitor's firewall. With a new leadership team focused on vendor consolidation, reduced operating costs and complexity, and addressing technical debt, The 40 OS consolidated multiple security functions onto a single platform, modernized an outdated firewall infrastructure, and replaced VPN technologies with a 5,000-seat SASE solution that relies on Fortinet's POPs. In another seven-figure SASE deal, an existing Fortune 500 SD-WAN retail customer purchased 40 SASE for 2,000 users with the potential to scale up to 12,000. They chose Fortinet for its flexible and consistent security enforcement, which enhances user experience while securing access to both on-prem and cloud applications. Additionally, they valued our strategy of building our own SASE delivery infrastructure, powered by our proprietary ASIC technology. And lastly, in a high seven-figure deal, a large energy company expanded its partnership with us by signing its first enterprise agreement to protect its global critical infrastructure. This customer secures its infrastructure using FortiGates across approximately 1,000 sites, spanning branch locations, data centers, and cloud environments. Key factors in this win included our ability to support their global critical infrastructure, both technically and through world-class support programs, our leadership and OT infrastructure capabilities, and the automation and seamless integration of our FortiOS system. With Fortinet supplying over 50% of the firewalls worldwide, Foreign and security solutions themselves have become critical infrastructure, protecting the critical infrastructure, in a threat landscape where there has been a step-level increase in sophistication and risk. Given our scale, innovation, and broad adoption, we and national cybersecurity agencies around the world view our partnership as key to protecting the most important customers and entities in this dynamic landscape. Next, I'd like to review some of our key AI solutions for threat intelligence, networking, knock and sock, and LLM leakage. For threat intelligence, FortiGuard AI powers security services combined with real-time threat intelligence, helps organizations combat known, unknown, zero-day, and emerging AI-based threats. For networking, FortiAI Ops reduces the time needed to diagnose networking issues. By monitoring trends in the network, and with full access to logs across a four-net security fabric. Our AI engine uses machine learning to understand the optimal conditions for the network and highest potential issues. For the knock-and-sock, 40AI uses natural language and generative AI to guide, simplify, and automate analyst activities. 40AI is integrated into seven different network and security operation products with additional products to be added. For LLM leakage, Our AI-based DLP services actively identify and block sensitive information from being uploaded or shared with AI systems. Before discussing our guidance, I'll offer a few updates on the record-level firewall upgrade opportunity that we shared during our November Analyst Day. In the fourth quarter, we saw early upgrade movement with large enterprises, both on buying plans and actual purchases. We expect the momentum to build as we move into the second half of 2025 as we get closer to the 2026 and the service dates. The 2026 and 2027 cohorts present a substantial upsell opportunity for SASE switches, access points, and SecOps solutions. To maximize our upgrade and cross-sell potential, we're implementing several initiatives, including creating sales plays for each customer segment and key vertical, expanding our account plans for larger enterprises to more specifically target the upgrade and expansion opportunities. and collaborating with our channel partners on SMB opportunities, incentive programs, end-user data, and developing targeted bundle offerings for these customers. Moving on to guidance, as a reminder, our first quarter and full year outlooks, which are summarized on Slides 23 and 24, are subject to disclaimers regarding forward-looking information that Erin provided at the beginning of the call. I should note we expect links and perception points to increase first quarter billings and revenue growth by approximately 90 basis points and decrease operating margin around 40 basis points. For the full year, we expect Linksys and PerceptionPoint to increase billings and revenue growth by approximately 125 basis points and decrease operating margin by around 50 basis points. All right, for the first quarter, we expect billings in the range of $1,520,000,000 and $1,600,000,000 which at the midpoint represents growth of 11%, revenue in the range of $1,500,000 to $1,560,000, which at the midpoint represents growth of 13%. Non-decap gross margin of 80 to 81%, non-gap operating margin of 30 to 31%, non-gap earnings per share of 52 cents to 54 cents, which assumes a share count of between 774 and 780 million. Infrastructure investments of 80 to $100 million, a non-GAAP tax rate of 18%, and cash taxes of $30 to $35 million. For the full year, we expect buildings in the range of $7,200,000 to $7,400,000, which at the midpoint represents growth of 12%. Revenue in the range of $6,650,000 to $6,850,000, which at the midpoint represents growth of 13%. Service revenue in the range of $4,575,000 to $4,725,000, which at the midpoint represents growth of 15%. Non-GAAP gross margin is 79% to 81%. Non-GAAP operating margin of 31% to 33%. Non-GAAP earnings per share of $2.41 to $2.47, which assumes a share count of between $773 and $783 million. Infrastructure investments of $380 to $430 million. a non-GAAP tax rate of 18%, and cash taxes between $525 and $575 million. And on a personal note, you may have read in today's 8K filing that after a four-decade career in finance, including 11 years at Fortinet, it's time for me to enjoy retirement. I'll continue to serve through the next quarter earnings call and up to May 15th and plan to stay at Fortinet to help with the transition through June 30th. Most importantly, I'm leaving Fortinet in very good hands, Pursuant to our succession plan, Christiana Olgaert, who, as discussed in the 8K, has served in various roles at Fortinet for almost six years, will take over as CFO as my step down in May. I'd like to thank Ken, Michael, and the Fortinet team, and all of you for making this chapter of my life so rewarding. I very much appreciate the time I've had at Fortinet working with Ken, Michael, the entire team, and certainly with the investors and financial analysts. I know I'll miss Fortinet, its people, customers, and its noble mission to protect and serve important customers and entities around the world.

Thank you, Keith, for your great service and contribution. And Christiana, we're looking forward to working with you in your new role to continue to drive the success of Fortinet. So I will now hand the call over to Aaron for the Q&A session.

Thank you, Ken. As a reminder, during the Q&A session, we ask that you please limit yourself to one question and one follow-up question to allow others to participate. Operator, please open the line for questions.

Thank you. And as a reminder, to ask a question, please press star 1-1 on your telephone and wait for your name to be announced. To withdraw your question, please press star 1-1 again. One moment for our first question. Our first question comes from the line of James Futawala with MS. Your line is open. Please go ahead.

Hey, thank you for taking my question. This is Jonathan Isenson on for Hamza. First off, Keith, congratulations on your career and best of luck with retirement and with your next endeavors. So, Ken, for you, so I believe some of the hyperscalers like Oracle are big customers and partners with Fortinet. So just curious, as you have Oracle and some of the other hyperscalers, building out new data centers. Just curious to what extent Fortinet is involved in securing these. Thank you.

Yes, thank you. It's a great question. So Fortinet is the only company we develop the secure ASIC processor. It's increasing the secure computing power quite a lot compared to using general-purpose CPU. That drives a lot of our girls into... We call it internal segmentation within a data center, hyperscale and all these things. So we see a huge opportunity and not just secure networking there, but also a lot of our data centers also relate to the AI. We also see huge opportunity to drive the AI security, whether secure the infrastructure itself or secure the data or secure the access. So there's a lot of opportunity. I do believe that's a huge potential for growth because of the unique advantage using the 40 ASICs.

Thank you, and we'll move on to our next question.

Our next question comes from the line of Tal Liani with Bank of America. Your line is open. Please go ahead.

It's an honor for me to ask a question after John, my ex-associate across the line. But I want to ask you two things. Number one is about the billings. Why is billing weak and weak guidance? And that second question is product revenues outperformed so much this quarter and that might be a cycle, a reverse cycle, but the guidance for next quarter, I don't see outperformance. So why is it just this quarter phenomenon and you don't carry the strength into the next few quarters? Thanks.

Yeah, Tal, I wasn't sure on your first question about billings, if you were asking about the fourth quarter or the first quarter.

I'm asking billing in general. So billing for the fourth quarter was better, but billing for the first quarter is weaker. So why is the weakness in billing?

I think if you look at the fourth quarter, maybe we'll start there a little bit. As you recall, we talked last quarter about the fourth quarter guidance process. There was a lot of concern around the eight-figure deals and what we were going to get out of that, and we were being cautious in the guidance. That was logically rather a prudent approach. Where we got the upside was on those deals from $5 million to $10 million to And I would say the close rate and the opportunity there was probably $40 million to $50 million more than what I anticipated in the guidance setting process. And you saw that same overperformance on those larger deals show itself in the product revenue line. And then also we saw in the product revenue line our significant growth in product revenue was in the mid-sized firewalls and the large firewalls. And when you peel back on that onion, you start to see enterprise companies have actually started their purchasing of the refreshes that we talked about at the analyst day. So I think obviously that the information and the news about Q4 is very good. I think if you look at Q1, whether it's billings or product revenue, probably just a little more caution there is we kind of got exposed to the tariffs here over the last week and we saw the reaction. And some of the concerns for us with more of a multinational footprint, particularly in Latin America and Canada, for example, the customer footprint, a little more exposure there. And then, of course, the direct impact of perhaps some disruption in the U.S. government, where we do have a footprint also. So maybe a little caution in that regard.

The other problem may impact some of the buildings, really. We're more also driving the AR, RPO, which are a little bit different than before. It's more about building, but this is RPO-AR probably would defer some building to the future, but will kind of secure the customer with all these, the platform, the unified SASE approach. That's where the SASE and the secure op tend to have a higher growth in the AR and RPO than the building.

Thank you. One moment as we move on to our next question. Our next question is going to come from the line of Gabriella Borges with Goldman Sachs. Your line is open. Please go ahead.

Hey, good afternoon. Thanks for taking my questions. I would love to hear a little bit more on the refresh opportunity for this year. I know you've broken it out for us in product versus cross-sell in a couple of different ways. I wanted to ask you specifically about the implications for subscription revenue. as you see the hardware come up for renewal and as you sell some of the networking components on the hardware side into your actual base. So, either for Keith or maybe Christiane, how do you think about the implications for subscription specifically as hardware comes up? Thank you.

Christiane, you want to jump in there?

Okay.

I think at the end of this day, I explained a little bit that the existing hardware has subscriptions. In order to grow subscription revenue, we need to upsell and sell either more subscriptions with the same hardware or more services. So we have put plans and incentives in place for our sellers and our channel partners to do so, but that's kind of the prerequisite for us to grow our service revenues or accelerate the service revenues.

Also, the new hardware tend to have more capacity to run additional function and better performance. That also can enable additional service, including a lot of new service we developed in the 4DOS in the last few years, like all the unified SASE function and some other AI-based function. That gives the new... new opportunity, leverage a new hardware.

Thank you for the detail. Congrats on the quarter and congrats to Keith and Christian as well.

Thank you.

Thank you. One moment as we move to the next question. Our next question comes from the line of Brian Essex with JP Morgan. Your line is open. Please go ahead.

Good afternoon. Thank you for taking the question. Keith, I thought when you started with key highlights for the quarter, your retirement would be up to the top. But seriously, it's been a real pleasure working with you and best of luck on the retirement. Well-deserved. And Christiana, looking forward to working with you. So congratulations on the appointment to CFO. You know, I guess the question I had was with regard to the, you know, the billings guide for this next fiscal year. Would love it if, you know, maybe Christiana, if, you know, I think you've done a lot of work on it, if you could unpack the assumptions behind that, you know, how much is upgrade, growth of SecOps and SASE, and how much is, you know, product-related refresh cycle baked into that, and maybe if you could share an exit rate, that would be super helpful.

So, in our fillings and revenue guidance, Of course, we have the two components, right? Product is what we sell this year, services is what was off the balance sheet mostly, and about 10%, 15% is from new services that we are selling this year. And our assumptions, of course, are, as we presented at the analyst day, that we have a significant upsell component, but we also are planning to, with certain incentives for again, our own sellers as well as our channel partners to drive new logos. And from an exit rate perspective, were you looking at exit rate for services?

Well, I guess overall for billings and then maybe if you can help us understand how much product revenue is baked into that, but it's really just trying to get a sense of the trajectory that you're baking into billings to kind of get to that full year. billings guidance that you have.

The product revenue growth, we assume, is around 10% right now, as we saw already, the significant traction this year. But yeah, that's the current running assumption.

Okay, that's helpful. And does that require like a exit rate in 4Q of like teens, like high teens billings growth or are you expecting a more moderate bill throughout the year?

Right now it's more moderate.

Okay. Super helpful. Thank you so much and congrats.

Thank you. Thank you. One moment as we move on to our next question. Our next question comes from the line of Fatima Bulani with Citi. Your line is open. Please go ahead.

Good afternoon. Thank you for taking my questions. And Keith, congratulations. I hope you very much have an enjoyable ride into the sunset. It's been terrific partnering with you. I wanted to go back to some of the commentary you made on the tariff impact. I did want to dig into that a little bit. So, you know, I think there is a significant amount of uncertainty from these tariffs. They're in flux. There are some potential retaliatory policies being thrown around. So I both wanted to dig into some of the demand comments you made and how far-ranging those are and how they are being contemplated in guidance. And then also from a supply chain perspective, how is that influencing or potentially impacting your supply chain and ultimately COGS and gross margins? Thank you.

Yeah. As you pointed out, it's an extremely dynamic time, if you will, in trying to understand where these may end up. I would say that for selling purposes, for demand, we have a fairly significant footprint in both Latin America and Mexico as well as Canada. And over the weekend when the tariffs were announced, there was a lot of activity here internally Sunday night and Monday morning to understand what the disruption would be more about those economies and their buying habits, if you will, of our products. And I think it's that type of reaction that we're focused on. I would also supplement that with a little more context. You know, our 40 authenticator product, I believe it is, is actually a very small product line, but it is manufactured in Canada. And we were looking at what the tariff impact would be like that. And then by Monday night, all those things, all bets are off. So, you know, we're kind of chasing it a little bit. And we do have, similar to our sales leadership in Latin America raising their hand immediately in what they were seeing and being concerned about with Mexico, our U.S. federal team similarly raised their hand and said, if there aren't going to be employees in the federal government to sell to, it's going to be challenging. So I just think we're acknowledging that it's a very dynamic situation right now, and let's try and not get too far out of our skis until we know more. On the other side, I think, in terms of tariffs coming into the country or products, keep in mind that our pure U.S. business is around 25%, 26%, 27% of our total business. So obviously that 70% plus international would not be subject to the tariff schemes of the U.S. I think there's obviously, if we had to respond in some way to the market, I think the tariffs would be broad brush and would affect not only ourselves and our U.S. business for that remaining 25%, 26%, but our competitors as well. And I would expect that we would still, at this early stage, still have the pricing advantage that we currently have.

Thank you, Christiana. Congratulations.

Thank you. Thank you. One moment as we move on to our next question. Our next question comes from the line of Shaliyal with T.D. Cowan, your line is open. Please go ahead.

Thank you so much for taking my question. Good afternoon. Congrats on results. Congrats, Keith, and congrats, Christiane. Keith, my question maybe builds a little bit on the prior question, but touches more specifically on your U.S. performance. This year, you had, I think, this quarter, the best quarterly performance in 2024. Do you see that being sustained into 2025, given some of your prior investments? What are the plans specifically as it relates to U.S. sales operations? Thank you.

Yeah, it's a great question. So I think probably starting a little bit over one year ago, we're starting to enhance the U.S. enterprise sales and also more focus on, like, adding sales capacity, and also kind of working closely with our channel partner to drive the growth, which both in the HICOM and also drive the program with the partner there. So we see some pretty good results, and so we do see there's a lot of growth in the U.S., and at the same time, we have a huge advantage on the resource, on the facility, on the people here in the U.S. and Canada that continue to drive the future growth. So that's where we see the U.S. could be the fast-growing region in the next few years.

Thank you so much. Thank you.

Thank you. One moment as we move on to our next question. Our next question is going to come from the line of Rob Owens with Piper Sandler Companies. Your line is open. Please go ahead.

Great, and thanks for taking my question. I was hoping you could expand a little bit just on the Linksys relationship and what you hope it brings. And I know, Ken, you did outline some expectations relative to revenue and billings, but just strategically where it positions you better. Thanks.

All right. The link is actually we acquired about 51% of share about three years ago. And then we keep in private shaping the company to more line up with our own kind of a secure networking strategy. But also it's all kind of a new market. We feel Fortinet probably is the only player can play in the consumer home-based network security. because we have this technology like ASIC, we have all this unified SASE, and together with the Lynx, it's consumer and also the huge user base, which they have 25 million active users and has been shipping almost 250 million devices in the last almost 40 years. So it's a leading brand and With this customer base, with our technology and all these combined resources, we feel we can really drive the new market for consumers to support and work from home, and also to cover some SMB space. We see pretty fast growth. So that's the strategy, but that also probably will take some time to continue to kind of develop all this technology market together, but we do feel this could be a huge potential in the next five to 10 years for the company growth.

Thank you. And we'll move on to our next question.

Our next question comes from the line of Eric Keith with KeyBank. Your line is open. Please go ahead.

Great. Thanks for taking the question here. And Keith, congrats as well. So Keith and Christiane, I wanted to understand a little bit just ahead of the refresh opportunity that's starting in the second half. How should we be thinking about inventory levels in anticipation of that demand? And then secondly, maybe to follow on to Brian's earlier question, just the assumptions embedded in the product guidance specifically from the end of service refresh. Are you assuming half of that $400 to $450 million opportunity happens in 2025? Thanks.

Yeah, I'll cover up the inventory question a little bit, and then maybe Christiana can come back over the top and talk a little bit more about the model for 2025. And I don't know that we will assign specific dollar amounts to each individual item in that, but in any event, Ken and I have been at this for a long time. He likes to see an inventory turn to two. I like to see inventory turns to five or six. I lose constantly on the inventory turns. We've gone through the supply chain cycle here. You saw the inventory turns. We did very well with those storing inventory, if you will, in our balance sheet as we got into COVID and supply chain crisis. And it really helped fuel the super cycle for us on our income statement. And with that in mind, I think a healthy number for us, I'd have to agree with Ken now, is probably in the range of 2X for the turns. And I would imagine that you could expect us to target that each quarter in terms of our inventory balances. Michonne?

Yeah, on the linearity of the product revenue assumptions, while there is definitely a compelling reason to refresh in the second half year because you can only renew for one year, we've seen refresh activity happen already, especially for large customers. And we will try to accelerate the upgrade cycle as much as we can. So we've assumed that there's a more gradual than kind of spiky upgrade path.

Thank you.

Thank you. And one moment as we move on to our next question. Our next question comes from the line of Sakakilia with Barclays. Your line is open. Please go ahead.

Okay, great. Hey, guys, thanks for taking my questions here. I tip my cap to both of you on your respective exciting next steps. So very clear numbers and a lot of helpful questions. Keith and Christiane, maybe I'll ask just a couple housekeeping questions, if I may. First, can you just remind us, I think you touched on it a little bit, can you remind us how big LATAM and Canada are just in terms of percentage of billings And then maybe on top of that, can you just remind me of the 12% growth that we're guiding to roughly in 2025, how much of that is organic versus inorganic?

To your first question, LATAM and Canada are about 15% of total business. And on the organic growth number, we expect about one point in organic.

Very helpful. Thanks, guys.

Thank you. One moment as we move on to our next question. Our next question comes from the line of Adam Borg with Stiefel. Your line is open. Please go ahead.

Hey, guys. You've got Max on here for Adam at Stiefel. Thanks for taking the question. Over the last few quarters, we've talked about SASE and SecOps billings coming primarily from existing customers. So as we look out into 25, just wondering what the opportunity is for SASE and SecOps to become a more meaningful contributor to new logos. And do you, or do you expect that to kind of remain as primarily an upsell motion?

Uh, I think we do have a huge installation base on the, uh, imagine far one also as he ran. If you grow, upgrade from that part, probably will come most of the new unified SASE. And that's also more easy sell for the sales force and also for the partner. I believe the last few quarter, probably over 90% now come from existing customers, which are already all firewall, major firewall and also SD-WAN customer. which does give us also more advantage compared to all these SASE only player. So that's where, and that's also the reason is also because we have the single OS. I have all this networking security with all this SD-WAN and also all the SASE functions in the same OS. So it's a very easy upgrade. On the other side, we do have a lot of new customers, and especially some big enterprises. Some of them do have an issue with some other sausage player, and we do have a lot of advantage on the better function, better integration, a single OS solution, and much better performance and pricing. Like I mentioned, probably 3 to 5x more price advantage and plus our own kind of infrastructure supporting this kind of lower cost, better margin, and at the same time integrate function together is more easy to manage and better protection. So that's the advantage we have. That's why we're also pretty confident. We believe we're not only leading the number one player in the next-gen firewall and the SD-WAN, we also give us some time. We're also leading, become the number one unified SASE player in the space.

Yeah, and I think Ken's spot on in terms of the factors, and I'll build on one of those, which is reducing complexity and reducing costs and making things simpler. I was really impressed with the first deal that I talked about in the learning script here when I talked to the sales team, which was a pure white-space account that started off as a competitive firewall displacement. And we know we're really good at that, and we know how to do that. But then to see them consult and collaborate with a customer and make not only an SD-WAN deal, which made a ton of sense, but also to get them in the boat on the SASE deal. And I think that speaks to, well, one, a very good sales team that brought that to the table for us, but the evolution and the maturity that you're seeing in our own organization as we get more experience underneath our feet and our ability to branch out and sell into those organizations that are focused on a consolidation play, removing complexity, and controlling cost.

That also will benefit from a lot of long-term investment, like in the single OS, in the in Harvard, also in ASIC. So we are the only ASIC designer in the whole space. And a lot of new ASIC design will drive the new SASE function, will give us a much better performance, lower cost, lower consumption. And also the sovereign SASE for service provider, for enterprise, for data center, we also see a lot of world's potential. That's really the unique advantage FoodInner has.

Thank you, and we'll move on to our next question. Our next question comes from the line of Shrunik Katari with Baird. Your line is open. Please go ahead.

Hey, thanks for taking my question. Just really solid unified SASE growth rates. You guys are seeing increased penetration among larger enterprises, which in the earlier commentary was still building momentum. So just curious, can help provide an update on incentives which are tied to upselling SaaS, ESET, COPs, and how these incentives are impacting overall product matrix, deal conversion, and then add a follow-up question as well.

Yes, really, we do want to accelerate the training to both our sales team, the technical team, and also our partner. But the customer definitely sees some of the long-term benefit of using a single OS to gradually add in more function and add in more security and easily upgrade to the next kind of security function they needed. And on the other side, I think we also need to keep at self-capacity. and at the same time provide better training. On the other side, we see the feedback already from Cosmoponder. They do see this upgrade of SASE is much easier compared to this new SASE approach and the much shorter sales cycle. And you can see it seems like we only launched our own SASE approach a little bit over one year, and you can see the ramp-up is very quick and probably fast-growing in the society space right now. So we do see a lot of great potential going forward.

Thank you, and one moment as we move on to our next question. Our next question comes from the line of Junaid Sidiquid with Truist Securities. Your line is open. Please go ahead.

Great. Thank you for taking my question. Keith and Christian, congrats to both of you. Keith, you mentioned SMB being one of the top performing customer segments, which is a bit different from what we hear from some of the other vendors. I was just curious, what is underpinning that demand and what are you seeing that others are not? Thank you.

Well, I think the channel program at Fortinet is probably fairly mature. I mean, Ken's been doing it for a long, long time. I don't think we're scrambling to find channel partners, if you will. I would also give a lot of credit to Christiana and what she's done in her year here, which is really focused on the channel and getting to more senior levels with the channel leadership to understand what's important to them and how to structure incentives that are tailored to what the channel is trying to accomplish. There's just much more collaboration with channel partners today than I've ever seen before here. And I think we had some fairly... specific and targeted incentive programs in the fourth quarter that Christiana helped develop. And I think those were, uh, as you see in the numbers, the new logos and 6,900, uh, and the mix of the business, extremely successful.

Yeah. I also see we have probably the best product, uh, because, uh, not a competitor, not as small as is a technology, uh, single OS with so many is almost 30 functions integrated in the same single OS and, uh, with, uh, with about having a function about 14, 15 using ASIC was accelerate. That's give us huge performance and function advantage than any other competitor. Because the SMB, like the three model we announced today, they run the same 40 OS compared to some other big box, bigger parts there. And that's where the SMB and even the long-term home users see some huge advantage. You've seen the same for DOS. They can kind of connect to the enterprise or they can connect to the cloud and also there's a new unified SASE approach. So that's where we feel it's a technology port advantage gave us huge kind of unique benefit to our customers and the customer eventually can be the home user consumer space. which we feel is because so far, even in the US and Europe, the developed country, the SMB still has only a single digit of SMB customer has any network security to protect their network in there. So we do see there's a lot of growth potential. But how to address this technology need to be easy to deploy, easy to use, easy to support and use the AI. And that's where we kind of invest quite a long time, and we do see it's kind of a long-term benefit of this long-term investment, also huge potential going forward.

Thank you. And one moment as we move on to our next question. Our next question comes from the line of Joseph Gallo with Jefferies. Your line is open. Please go ahead.

Hey, guys. Thanks for the question. Keith, congrats on the much-deserved retirement, and congrats to Christiane. I look forward to working more with you. It was great to hear about the early end-of-life refresh demand. In those early renewals, how has the average deal size increased versus four years ago? I'm just trying to understand how you're thinking about the size of the cross-sell opportunity versus that $450 million product refresh.

Thanks. Yeah, I think I tried to make the point that what we've seen, and I guess it kind of makes sense, is that The larger enterprises are probably moving first. We expect that the SMBs may move a little bit later on the timeline. They probably have less advanced purchasing departments and maybe less regulatory pressures and things of that nature. There's probably a lot of reasons for it. I think what you see in our large enterprises historically is they – they often have a deployment schedule. They may not necessarily take all the equipment at one point in time, but rather take a certain amount each quarter, maybe nothing in one quarter and more in the third quarter. And it was that same buying behavior pattern that I think we started to see in the fourth quarter. We started looking back at some of these more regulated industries, also some technology companies, and we could see the swapping out of the mid-major products that are being end-of-lifed and then taking on new products. And we talked to the account person about, yes, they are on that runway, and they will continue doing that now over the next several quarters.

Let me add to what Keith just said regarding your question of average deal size. So as we have a lot of large customers that have enterprise agreements, they pretty much have an ongoing purchasing habit of, replacement devices that they build out during the EA. So you don't necessarily see creeping up larger deals because they negotiate at a certain point in time what they need for the next five years and then they buy as they are ready to upgrade.

Thank you. And one moment as we move on to our next question. Our next question comes from the line of Ittai Kidron with Oppenheimer and Co. Your line is open. Please go ahead.

Thanks, and congrats as well for both of you, Keith and Christiana. Good luck and enjoy retirement, Keith. You earned it. A couple of questions for me. Just again on this upgrade cycle, if you know the devices and you can ping them and you know exactly where they are and when they get retired for the vast majority of Can't you just be a little bit more specific on what was the contribution of this upgrade to revenue this past quarter and what is the exact dollar contribution you expect from the upgrade in your 25 guide? And the second question is for Ken on SASE. Great to see the progress in adoption over there. Can you comment, though, of how much of the adoption with the large enterprises is against brownfield displacement of old SASE solutions or walking into a vacuum. We'd love to understand how much of your footprint, in your opinion, has something that you need to displace versus your stepping into a vacuum. Thank you.

Yeah, I think it's a great question, and keep in mind the two-tier distribution model. We sell to distributors, we sell to resellers, we sell to end users, and oftentimes it's SMB. the quality of the data about the end user gets better and better the closer you get to the end user, which would be the reseller. And it's why you heard a reference in the script about the importance of working with them on data gathering. You know, there's a bit of an honor system when they register the devices. It may be more intuitive to us that, of course, when you get a device, you register it like our phone or something like that, but that's not what happens in practice, particularly in the SMB. And really, there's a heavy reliance there on the channel to spend time and energy if you want to get good reporting and tracking on that. So we'll get better at it as we go, and that's part of working closer with the channel partners. It is easier, quote-unquote easier, with the enterprises because we can talk to our sales rep who's working in a large enterprise and understand the account plans and what they're seeing, but you're still only getting a partial set of information. I think the reporting and the information will get more mature as we go along. It's moving pretty quickly right now on us in terms of how we're developing it. Anyways.

For your second question, actually, you can refer to the presentation slide number five. So they do give some penetration rate. I think for SASI, it's around 10%. It increased two points from like two months ago on NSDA. And then also SD-1 in a large enterprise, probably about 70%. So that's where We see with our leading in the firewall, major firewall market, and then that's actually drive a lot of our SD-WAN growth. And then also after SD-WAN, the SASE will be the next growth. We'll keep helping customer build better security infrastructure.

And in terms of your question, whether it's brownfield or not, we are seeing some of our biggest SASE deals as displacements. either legacy VPN providers or legacy SASU providers.

Appreciate it. Thank you.

Thank you. And I would now like to turn the conference back over to Aaron Odiva for closing remarks.

Thank you. I'd like to thank everyone for joining today's call. We will be attending an investor conference hosted by Morgan Stanley during the first quarter. The Fireside Chat webcast link will be posted on the events and presentations section Fortinet's investor relations website. If you have any follow-up questions, please feel free to contact me. Have a great rest of your day.

This concludes today's conference call. Thank you for participating, and you may now disconnect.