11/16/2020

speaker

When imagination ran away with me, it took me by the hand and led me away on an adventure adults wouldn't understand. It showed me glorious green forests and silvery snow-capped mountains, ancient ruins and relics, and exploding fantastical fountains. It took me to a magical world where dragons roam, cauldrons foam, and children save the world alone. It showed me what the world could be If no one put restraints on me.

speaker
Karen Fung
Senior Director of Investor Relations

Good morning and thank you for joining us on today's conference call to discuss Paula Walton Network's fiscal first quarter 2021 financial results. I am Karen Fung, Senior Director of Investor Relations. This call is being broadcast live over the web and can be accessed on the investor section of our website at investors.paulawalternetworks.com. With me on today's call are Nikesh Arora, our Chairman and Chief Executive Officer, Luis Visoso, our Chief Financial Officer, and Lee Klarich, our Chief Product Officer. This morning, we issued a press release announcing our results for our fiscal first quarter ended October 31, 2020. If you would like a copy of the release, you can access it online on our website. We would like to remind you that during the course of this conference call, management will make forward-looking statements, including statements regarding the impact of COVID-19 on our business, our customers, the enterprise and cybersecurity industry and global economic conditions, our expectations related to financial guidance, operating metrics and modeling points for fiscal second quarter and full year, Expanse's contribution to our fiscal 2021 ARR, our expectations regarding the timing of completing our acquisition of Expanse, our competitive position and the demand and opportunity for our products and subscriptions, benefits and timing of new products, features and subscription offerings, including those from our proposed acquisition of Expanse, as well as other financial and operating trends. These forward-looking statements involve a number of risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. These forward-looking statements apply as of today. You should not rely on them as representing our views in the future, and we undertake no obligation to update these statements after this call. For a more detailed description of factors that could cause actual results to differ, please refer to our annual report on Form 10-K filed with the SEC on September 4, 2020, and on our earnings release posted a few minutes ago on our website and filed with the SEC on Form 8K. Also, please note that certain financial measures we use on this call are expressed on a non-GAAP basis and have been adjusted to exclude certain charges. For historical periods, we have provided reconciliations of these non-GAAP financial measures to GAAP financial measures and the supplemental financial information that can be found in the investor section of our website, located at investors.paulawaltonetworks.com. And finally, once we have completed our formal remarks, we will be posting them to our investor relations website under the quarterly results section. We'd also like to inform you that we will be virtually participating in the Wells Fargo TMT Summit on December 1st and the Barclays Global TMT Conference on December 10th. Please also see the investor section of our website for additional information about conferences we may be participating in. And with that, I will turn the call over to Nikesh.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

User conference which starts tomorrow morning. This is my 10th quarterly call at Palo Alto Networks. The one thing in common between the first and the 10th is they were both 5 a.m. calls. I finally feel that we're turning the corner on all that we've been doing over the last few years. We have a lot of interesting stuff in store for you on this call. In addition to sharing our first quarter results, we will discuss the financial impact of our proposed acquisition of Xpans, Since Louise joined us last quarter, he and I have had the privilege and opportunity to talk to a lot of you. And based on the feedback, we've come up with a more transparent approach to understanding our business. And hopefully it gives you a better understanding of what we have been up to and a way to think about Palo Alto Networks 2.0. Over the last seven months, I've been cautious on the pandemic and our teams have continued to deliver and surprise me to the upside. I'm delighted to report this is no longer a coincidence. Our customers are investing, our teams are executing, and our strategy of innovating in our firewall business and focusing on the next generation of products around cloud and AI in the industry is working. As you can see, we had a great start to fiscal year 2021 as we exceeded guidance across all metrics in Q1. Here are some of the highlights. We delivered strong billings of $1.08 billion, up 21% year-over-year, with strong growth across the board, driven by continued strength in next-generation security, or NGS billings, growing at 53% year-over-year and NGS ARR of $719 million. Revenue was up 23% to $946 million, driven by strength in our cloud-based subscription and support revenue businesses. Non-GAAP EPS was $1.62 of 57 cents from last year. The EPS expansion was driven by revenue growth and operating expense leverage due to efficiencies as we have seen across the industry from lower spend associated with travel and events around COVID. Adjusted free cash flow margin was 53.4%. As mentioned last quarter, we expected a strong cash quarter following the record Q4 2020 billings. We think some of this will continue into the next quarter, but we expect this to normalize for the year around our full year guidance. This continued strength during the pandemic makes me cautiously optimistic about the future prospects of the business. While we expect the winter will try all of our collective resolve with COVID, the worst case scenarios are unlikely to unfold and we expect our customers to continue to invest in technology. I also feel that the strategic bets we made a few years ago are right for our customers in the current environment. Against that backdrop, I feel comfortable raising guidance for the full fiscal year, even before including the contribution of our proposed acquisition of expense, which we announced last week. Fiscal 2021 And at the midpoint guide, we expect total billings growth of 19%, up 300 basis points from our prior guidance. Total revenue growth of 20 to 21%, up 300 basis points from our prior guide. Next generation security ARR to be approximately $1.15 billion, up 77% year over year. We also expect non-GAAP operating margin adjusted free cashflow expansion up from our prior guidance of flat year over year. Subject to close, this includes a benefit from expense of approximately 100 basis points of billing growth, 50 basis points of revenue growth, and $70 million in ARR. We will absorb expenses, operating expenses, within the framework of our guide. Let me now highlight some of the key innovation launched in Q1 and the very positive customer traction, starting with our firewall business. We continue to drive innovation within our firewall business. We recently extended our new enterprise DLP solution to integrate with our complete firewall platform. Our DLP offerings is a cloud delivered service that is powerful, simple to deploy and protect sensitive data whether a customer keeps the data in the cloud on-prem or takes a flexible approach. This launch takes our number of potential attached subscriptions to eight from four just two years ago. We also introduced an innovative joint solution with our VM series virtual firewall and AWS gateway load balancer. Our engineering level partnership with AWS enabled us to launch this new capability that significantly simplifies deployment, improves the scale and performance, and reduces the total cost of ownership of our VM series customers. Going forward, we will continue to provide leading innovation to our customers. One example of this is the upcoming launch of our new 5G native security offering. It's our unique approach to 5G security. We're the first to introduce 5G network slice security, 5G context-driven security, and much more. All in a containerized solution matching the preferred architecture of 5G. Not only will this allow mobile operators to secure their 5G infrastructure, but it will also enable them to launch value-added security services to their growing enterprise customers who are leveraging 5G for many new use cases. As a result of our efforts to drive innovation, our firewall business continues to receive industry accolades. I'm excited to share that Palo Alto Networks was crowned again as a leader in Gartner's magic quadrant for network firewalls. This is the ninth consecutive time we are a leader in this magic quadrant. Once again, we've achieved the highest and furthest overall position in the magic quadrant for our ability to execute and our completeness of vision. Not only was our strength in extradition firewall product capability recognized, but our services like DLP and focus on cloud security was cited as trends as well. In Q1, we were also recognized as leader in the Forrester Wave Zero Trust extended ecosystem platform providers report, noting that we have assembled a robust portfolio that delivers zero trust everywhere, on premise, in the data center, and in the cloud. Our strategy in firewalls is working as firewall to the platform group buildings by 16% in Q1, 2021. And we added approximately 2000 more customers for a total of 71,000 next-generation firewall customers. Our software next-generation firewalls, VM series and CN series continue to gain momentum as well. And we now have over 10,000 customers using our software firewalls. Moving on to our SASE or Secure Access Service S solution, Prisma Access and CloudGenics. As SD-WAN has become the primary WAN architecture, organizations are demanding solutions with a better user experience while being simpler to deploy and manage. In the quarter, we introduced a number of new additions to our next generation SD-WAN solution, CloudGenics. This included new ML-based capabilities to enhance our AIOps approach and further simplify network operations. Two new SD-WAN appliances, a small form factor appliance designed for retail and small offices and home offices and a high performance application appliance suited for large campus and data center locations. We also delivered the first CloudGenics and Prisma Access integration, which seamlessly enables cloud delivered branch security in just a few clicks. In addition to the Gartner Magic Cordon network firewalls, Palo Alto Network's CloudGenics SD-WAN was recognized as a leader in the 2020 Gartner Magic Cordon for WAN infrastructure. For many of our customers, COVID accelerated the digital transformation timelines, and we continue to see conversion of remote access trials and very strong pipeline generation. We now have more than 1000 Prisma SASE customers, more than double from a year ago. to highlight a deal from the quarter. We want a seven-figure SD-WAN deal with a US retailer who had already been a Palo Alto Networks customer for a number of years and was an early adopter of Prisma Access. The success that we had with Prisma Access and the strong integration with CloudGenics was a winning combination and this customer is now a full SASE customer. Switching to Prisma Cloud. Prisma Cloud is very well positioned for sustainable growth as it is at the heart of the global shift to cloud computing. In Q1 2021, we launched Prisma Cloud 2.0, introducing four new modules to enable customers to easily and rapidly extend their cloud security coverage in a number of critical areas, all within a single cloud native security platform. These modules are data security, which discovers and protects cloud storage data at the scale and velocity common in public cloud environments, and addressing one of the most common data exposure issues in cloud transformation. includes web application and API security, which protects web applications from attacks. Our approach addresses the challenges of deployment complexity and scalability by leveraging the same agent as our container and host security, making it very easy and horizontally scalable. We launched identity-based micro-segmentation with the integration of Apparetto technology, enabling zero trust security for cloud applications and a cloud-native identity-based approach. And lastly, IAM security, which allows security teams to gain visibility into effective cloud identity permissions, user activity, implement governance, and respond to issues. While only recently introduced, we're excited by the strong customer interest we're seeing. Prisma Cloud now serves 20% of the global 2000 companies, 70% of the Fortune 100 companies and secures 1.8 billion cloud resources. This customer momentum is up from the 14% of global 2000 companies reported last quarter and up significantly from the 43% of Fortune 100 that we reported two quarters ago. We're also seeing substantial increase in Prisma Cloud customers are using both cloud security posture management and cloud workload protection for containers and serverless applications. Now at 45% up from a third we reported last quarter. To highlight the benefits of our consumption model, we want a high seven figure deal with a leading technology company to use Prisma Cloud for CSPM for AWS and cloud workload protection. This customer has quickly consumed the workloads purchased and we are working with them to support the expansion to new clouds and new workloads. Moving to Cortex. Cortex is on its way to being the industry's first proactive security platform, collecting data across the multiple security data sources, applying machine learning techniques to detect sophisticated threats before they have a chance to succeed, and fully automating response for known threats. We've seen some incredible benefits to customers who adopted Cortex, from customers seeing up to 50x reduction alerts to customers automating more than 1 million incidents per day. And based on our telemetry, we can see that we recently passed the mark of 400 million actions automated, up 100% in just four months. As a result, we're winning with customers who share our vision, including 34% of Global 2000 and 65% of Fortune 100. We continue to drive product innovation in Cortex XDR. Our recent XDR 2.5 release includes many new capabilities that have enabled us to catch up in a number of areas surpassing leading EDR products. For example, we introduced Host Insights, our first add-on module for XDR, which provides vulnerability assessment, application visibility, and our new search and destroy feature. And to our knowledge, we are the first EDR product to offer this search and destroy capability that will greatly speed up security response and eliminate the need for additional endpoint agents. This might be a good time to highlight a customer win we had recently. We won a seven-figure deal, and this is a story we hear every day. The customer has a small SecOps team managing multiple point products that were generating too many alerts with too few resources to investigate every alert, leaving them exposed to advanced threats. Being able to quickly investigate alerts and identify and remediate threats was a critical requirement. Their existing EDR product was disjointed from the rest of the security infrastructure, making it difficult and time consuming to correlate data. At the same time, their SIM was consuming a large chunk of the annual budget with little ROI. We challenged their way of thinking by demonstrating how the Cortex platform could automate and streamline security operations, allow them to consolidate multiple products, including the SIEM intercorp. We demonstrated how Cortex will help transform the SecOps team by automating routine processes and knocking down alert volume by more than 95%, allowing them to focus on the critical field. In Q1, we also launched the XSOAR Marketplace, which opened up the platform to both our partners and customers, and we now have over 500 content packs available to customers to enable automation for the security solutions. Additionally, we're seeing engagement and momentum within our partner ecosystem with contributions and use cases, ranging from insider threat to cloud security and threat intel management. The last deal I want to share with you is a Fortune 500 diversified financial service company. Prior to implementing Cortex XSOAR, this customer was receiving over 1 billion threat alerts per week, completely overwhelming their security operations team, leading to a state where alerts were disregarded, creating a significant security gap. By leveraging XSOAR and XSOAR threat intel management, they were able to take full control of threat information by aggregating disparate information sources, automatically customizing and scoring feeds, and matching indicators against their environment, as well as leveraging playbook automation to drive instant action. This combination of automation tactics reduced the number of threat alerts they received by more than 99%, creating a significantly more secure environment. Moving quickly to Xpans. Last week we announced our intent to acquire Xpans and told you about what they do and how they fit within our overall vision of Cortex. Xpans has dedicated themselves to developing an internet collection attribution platform that constantly monitors the global internet, mapping the exposed and untracked assets of an enterprise that comprise its attack surface. This data gives organizations a crucial picture from the outside in, that is to say, the same view that an attacker sees when hunting for potential weaknesses. is because of the insight that their technology is trusted by some of the world's largest and most complex organizations, from members of the Fortune 500 to the US military. With our user conference Ignite kicking off in a little over 24 hours, we're excited to share that outside-in view with our customers. We work with Expanse to offer all CIOs and CISOs attending an Expanse Exec Report, which provides a vulnerability map and immediate insights to a customer's complete tax surface, risks, and suspicious activity. This is a great lead generation tool for our sales teams to hit the ground running once we close the transaction. Expansive transaction multiples are very favorable compared to other companies of equivalent size and even more so when adjusting for growth. Now to the financials. As we said in our call last week, on a standalone basis, we expect Expansive to contribute $67 million of ARR to our current fiscal year ending July 2021, continuing its 100% growth momentum. With Palo Alto networks and subject to close, we expect Expans to contribute 73 million of ARR in FY21. Assuming a mid to late Q2 close, we expect Expans billings to contribute about 100 basis points of our growth to our overall billings for FY21. And adjusting for purchase accounting, we expect Expans revenue to contribute about 50 basis points to our overall revenue for FY21. I know that you get concerned about M&A strategy, perhaps because inorganic impact to our P&L is hard to forecast in your models. But if you look at the $2.7 billion of acquisitions we have done since 2019, they contribute approximately 15% of our forecasted FY21 billings. Very large enterprise companies have been built by successful M&A strategies. Good M&A strategies need to ensure that the products are easy to integrate, their products customers want, and that we at Palo Alto Networks can significantly change their trajectory. We believe that our ability to acquire, integrate, and leverage our go-to-market for acquisitions is a strategic competitor advantage, and we expect to continue to be opportunistic to increase our long-term growth strategy. As I mentioned, Louise and I have spent a lot of time with all of you, and you've all highlighted that you love our business. Some of you have questioned whether our firewall business is under pressure. Others have wanted more transparency around our gross margins, while some of you have wanted more visibility around ARR and eventually how to put it all together. Well, we heard you. It has taken a Herculean effort to share our quarterly results in the shortest period we've ever done, but also to deliver detailed reporting on two categories to show that our business is doing extremely well. Let's take a look. Over the last quarter, we have discussed our total pilot network's performance and provided details for next-generation security and firewall as a platform. We had hoped that the firewall as a platform metric shows you how we're continuing to create and share in the firewall space. The challenge has been that we did not provide anything below that number, but we've decided that perhaps the best way to allay your concerns is show you the proforma P&L around FVAP and show you how it enjoys great margins and is actually a higher quality business since we're transforming our hardware business to a software and subscription business. We like this shift as software revenues is of higher quality and increases revenue visibility. Our next-generation security business, which has been the thrust of our innovation over the last two years, has been highlighted to share with you how we're building a bigger and better business faster than anyone else in next-generation security. Next-generation security provides a perspective in our fast-growing SaaS business on a billings basis. NGS has nearly a quarter of total billings, up from 8% in FY18. NGS ARR closed Q1 at $719 million, up from $651 million in Q4 2020, and up from $568 million in Q3 2020. To provide a better understanding for our business, we juggled a few pieces around. For our firewall as a platform business, we added the related subscriptions, support, and professional services. We call it network security. We removed the software firewalls from NGS in order for the two areas to make a whole. We call this cloud and AI. With that context, we have prepared a recast of our fuller guidance, which I just raised across both categories. Let's double click into network security. Our network security business on a standalone basis is still the largest firewall business in the industry by revenue. It enjoys double-digit growth driven by transformation to software form factors, our success in VMs and Prisma SASE, and increased subscriptions to Attach. This has allowed us to have lesser and lesser reliance on hardware and provides better revenue visibility. We feel comfortable that these growth rates are robust and sustainable. Our gross margins and operating margins are extremely healthy. The gross margin is slightly less than where they could be because of our SASE gross margins, which, given the early stage of that product scale relative to firewalls, it has slightly lower margins. As we scale our SASE business and the new subscriptions we have launched, we expect these margins to improve over the next few years. Needless to say, these numbers speak for themselves, and on a standalone basis, this will be a very valuable network security business. As you noted, our firewall business is largest in industry. We have industry-leading financials, and we're going through a transformation. We will continue to invest in this transformation. Fallout Networks has already transformed into a highly ratable business, where ratable revenue, the percent of total revenue, is up from 59% two years ago to 71% in Q1 2021. Now on the cloud and AI, this story has just started. If you ask every CIO, the two trends that they're all excited about are the transition to the cloud and the impact of AI. Well, there is no transformation unless it is a secure transformation. I think we have put to rest any questions on the idea that customers would get their cloud security from the CSPs only, but 70% of Fortune 100 being served by us. I think this is our opportunity to build upon. We're singularly focused on continuing to improve our platform to meet the needs of our customers as highlighted earlier. On the AI front, we're in the second iteration of this trend. The first trend was around collection of data and attempted correlated for security. The next trend, which we are well poised to capture, is a trend to normalize data, reduce the signal to noise ratio, and to improve the security posture using data, AI-based proactive security using Cortex. We have organized our financials for our cloud AI security category. This business, which we started building two years ago, is gaining traction. We're ensuring that we build this as a SaaS and ARR business. We expect ARR for cloud and AI to grow 89% year-over-year in FY21. Even when excluding the expanse contribution, we expect the growth to be 71% year-over-year. While the gross margins look lower in FY21 compared to FY20, partially because of the integration of Krypsys, we expect that this business will continue to improve gross margins every year and improve significantly over the next three, four years. Operating margins will naturally improve as their addable revenue is recognized from the balance sheet to the P&L. We believe there's a larger opportunity in cloud AI, and this could be the next $100 billion in security. That said, we will continue to invest aggressively to grow this business. In summary, if you put it all together, we have two great businesses doing exactly what we would like them to do. In conclusion, we had a great fiscal quarter across the board, and as a result, we are raising our fiscal 2021 guidance. We've been building two businesses at Powered Networks. Our network security business is a larger firewall player with sustained gross margins and operating margins, and we have fast-growing cloud and AI business, where we expect F521 ARR of 89% every year. Lastly, I want to give you a quick update on what we call FlexWorks. I started this morning by calling out the continued resilience of our employees. Throughout COVID-19, we've been supporting each and every employee with our flex work approach. A series of initiatives to give employees far greater choice as they adapt to challenges this year in areas from work location, to benefits, to learning, All underpinned by the way we lead and communicate, with compassion and authenticity. We continued to advance this approach through Q1. We launched the first phase of Flex benefits, giving our employees an additional $1,000 allowance for the year to choose from a wide range of well-being and childcare options. We rolled out the first module of Flex Learn, an individualized learning path for our sales teams, leaders, managers, designed to support them as well as they work and lead remotely. We're delighted to see our FlexWork approach now gaining traction beyond pilot networks. Last month, we launched FlexWork at Zoomtopia and invited other companies to join our open source discussions and share case studies and learnings. Over 600 attendees showed interest in the work. Simultaneously, the CEOs of Uber, Box, Splunk, and Zoom all joined me in formally announcing the FlexWork coalition community of leaders coming together to develop and share best practices as we focus on the future of work. We all agree the pandemic has highlighted areas of opportunity where we can bring about enduring workplace change. I look forward to continued conversations with these leaders and about how we can accelerate new work practices that put our employees at the center. With that, I will turn the call over to Louise.

speaker
Luis Visoso
Chief Financial Officer

Thank you, Nikesh, and good morning to everyone. Before I start, I'd like to note that except for revenue and billings, all financial figures are non-GAAP and growth rates are compared to the prior year period unless stated otherwise. As Nikesh indicated, we had a great first quarter as we continued to deliver winning innovation and add new customers. This strength gives us confidence to raise our guidance for the year. In Q1, total revenue grew 23% to $946 million. Looking at growth by geography, the Americas grew 27%, EMEA grew 16%, and APAC grew 11%. Q1 product revenue of $237 million increased 3% compared to the prior year. Q1 subscription revenue of $428 million increased 34%. Support revenue of $281 million increased 26%. In total, subscription and support revenue of $709 million increased 31% and accounted for 75% of total revenue. Turning to billings, Q1 total billings of $1.083 billion net of acquired deferred revenue increased 21%. Strength was broad-based as we continue to see strong execution across the company. The dollar weighted contract duration for new subscriptions and support billings in the quarter was up slightly and remained at approximately three years. Total deferred revenue at the end of Q1 was $3.9 billion, an increase of 31% year over year. Remaining performance obligation or RPO was $4.4 billion, an increase of 40% year over year. In addition to adding approximately 2,200 new customers in the quarter, we continue to increase our wallet share with existing customers. Our top 25 customers, 24 of which made a purchase this quarter, spent a minimum of $57.2 million in lifetime value through the end of fiscal Q1 2021, a 37% increase over the $41.7 million in the comparable prior year period. Q1 gross margin was 75.8%, which was down 80 basis points compared to last year, mainly driven by higher mix of our NGS products, which are less mature. Q1 operating margin was 21.7%, an increase of 590 basis points year over year. The operating margin expansion is driven by operating expense leverage as we benefit from lower travel and event expenses due to COVID, which more than offset the incremental investment in headcount. We ended the first quarter with 8,376 employees, including 156 from CRIPSIS at the close of acquisition. On a GAAP basis for the first quarter, net loss increased to $92.2 million or $0.97 per basic and diluted share. Non-GAAP net income for the first quarter increased 51% to $158.1 million or $1.62 per diluted share. Our non-GAAP effective tax rate for Q1 was 22%. Turning to cash flow and balance sheet items. We finished October with cash, cash equivalents and investments of $4.1 billion. During the first quarter, we repurchased $500 million or 2.1 billion shares of common stock at an average price of approximately $242 per share. We have returned $2.7 billion to shareholders since Q1 2017 through the repurchase of programs and ASR where we repurchased 15.1 million shares of common stock at an average price of approximately $179 per share. Q1 cashflow from operations of $535 million increased by 138% year over year. Free cash flow was $505 million, up 184% at a margin of 53.4%. As we mentioned last quarter, this was driven by the strong cash collections following Q4 2020 record billings. DSO was 81 days, an increase of 18 days from the prior year period. We expect another strong collections quarter in Q2, which is expected to bring our DSO down to historical levels. Turning now to guidance and modeling points. For the second fiscal quarter of 2021, we expect billings to be in the range of $1.17 to $1.19 billion, an increase of 17 to 19% year over year. We expect revenue to be in the range of $975 million to $990 million, an increase of 19% to 21% year over year. We expect non-GAAP EPS to be in the range of $1.42 to $1.44 using 98 to 100 million shares. Additionally, I would like to provide some modeling points. We expect our Q2 non-GAAP effective tax rate to remain at 22%. GAPEX in Q2 will be approximately $30 to $35 million. As Nikesh reviewed earlier, for the full fiscal year 2021, we will be raising our guidance across all metrics. We expect billings to be in the range of 5.08 to $5.13 billion, an increase of 18 to 19% year over year. We expect next generation security ARR to be approximately $1.15 billion, an increase of 77% year over year. We expect revenue in the range of 4.09 to $4.14 billion and increase over 20% year-over-year. We expect product revenue to be flat year-over-year. We expect operating margins to improve by 50 basis points year-over-year. We expect non-GAAP EPS to be in the range of $5.70 to $5.80 using 99 to 101 million shares. Regarding free cash flow, for the full year, we expect an adjusted free cash flow margin of approximately 29%. With that, I'd like to open the call for questions.

speaker
Karen Fung
Senior Director of Investor Relations

In the interest of time, please limit Q&A to one question. Our first question comes from Walter Pritchard from Citigroup.

speaker
Walter Pritchard
Analyst at Citigroup

Hi, thanks. Can you hear me? Yes. Hey, Walter. All right. Great. Thanks. So I guess, you know, you've seen really strong customer ads around Cortex and around Prisma and have, you know, I think your Global 2000, Fortune 500 penetration is pretty strong here. Can you talk about where you are in terms of standardization among some of those clients and how you think about revenue from those products around upsell versus new customers going forward?

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Well, you know, different answer for both of them. As you know, that our Cortex XDR platform is only about two quarters old and we're delighted that we're crossing a thousand customers in that category. We continue to see opportunity in penetrating both our existing customer base and new customers as far as XDR is concerned. As you know, we keep launching more capability in our XDR platform. We want to go from being able to just normalize data across their endpoints and firewalls to more and more data sources. And with the combination of expense, we think that's a very powerful proposition. We think in the future, it's no longer about aggregating data and throwing it into a large data lake and running analytics. It's about being able to normalize the data. So I think we're early in the transformation of data and AI based security around Cortex. And this is a very long runway ahead of it. In terms of Prisma Cloud, what's fascinating as we highlighted an example in the call, where we had a customer who kind of estimated how much workload and how much capacity they're gonna need into cloud as they ran through it in a quarter. That's what we think over time happens to all the cloud customers because it's kind of interesting. The gap between how much people have actually sort of move to the cloud versus how much is ahead of them is huge. I'd say it took us two years to get to the cloud, to get 70% of our capacity off our data centers in the cloud. We had to buy everything two years ago to start ramping up to get there. So we think all of our customers are early in their ramps, relatively speaking. Some of them are further along, but we think most customers are early or maybe in the first or second innings of the ramp. And we think there's a long runway ahead as well for the cloud part. So in cloud, we're really focused on customer acquisition and landing customers. That's why we keep sharing with you 70% of the global in a Fortune 100 or 20% of the global 2000, because we think the more customers we can have, we expect consumption to keep going for each of those customers. Hence, we have a consumption-based model for most of our products now, because the more they consume, we expect recurring revenue to show up. Does that give you a better sense, Walter?

speaker
Walter Pritchard
Analyst at Citigroup

It does. Thank you.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Keith Weiss from Morgan Stanley. Keith, I think you might be on mute.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Are you going back to sleep? I know it was a long call, Keith, not that long.

speaker
Karen Fung
Senior Director of Investor Relations

We'll move on to the next caller. Sterling Aldi from JP Morgan, and then we'll move back to Keith afterwards.

speaker
Sterling Aldi
Analyst at JP Morgan

Thanks. Hi guys. Thank you very much for the additional disclosure. Incredibly helpful, but just want to make sure I understand how should we think about, you know, you gave the guidance for total product revenue improved to flat year over year, but I'm just kind of curious what impact you're seeing from SD-WAN and other areas that might actually provide some further improvement in that product growth rate as we move through the year.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

I'm struggling. Thank you. We include the SD when revenues, mostly in our Prisma sassy product which goes in the overall firewall as a platform billing. So you will see the impact of SD one in our fire was a platform buildings number Then we continue to see strength in the SD-WAN category as well as the entire SASE category that I mentioned. I think most remote work transformations, network transformations are not done. They're early in their sort of journey. And I think most of our customers are realizing that they're going to have to migrate their network infrastructure to more of an SD-WAN style infrastructure as well as they're going to probably have to sustain 100% capacity for remote working for much longer than anybody thought.

speaker
Sterling Aldi
Analyst at JP Morgan

But I thought with the two products, one of it was on box. I didn't know if that was going to have the ability to provide some pull through for some additional product as well as we move through the year.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Even that on box SD-WAN subscription is part of our subscriptions number, which again shows up in the FWAP Billings number. And this new left-hand side we just showed you. Understood. Thank you. No problem.

speaker
Karen Fung
Senior Director of Investor Relations

We'll try this again. The next question comes from Keith Weiss from Morgan Stanley.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Good morning, Mr. Weiss.

speaker
Keith Weiss
Analyst at Morgan Stanley

Good morning. Can you guys hear me now? Yeah. Excellent. So thank you for taking the question, bearing with me and my technical difficulties. Very nice quarter. Love the expansive disclosure. I think it's a really good view on the overall business. I want to dig a little bit more onto the firewall side of the equation. I think it's going to surprise guys is both the growth in sort of the overall customer base. I think it was up 8,000 on the year on your basis, as well as sort of the overall kind of buildings growth in that business. Can you talk to us a little bit about one kind of where the customers are coming from, how you guys are expanding that overall firewall base. And then two, what are the kind of vectors of growth we should be thinking about on a going forward basis? Like, Where are we in terms of subscriptions per customer? How far can that go on a going forward basis, as well as kind of like the virtual versus physical mix? Like how much further is that taking up your spending per customer?

speaker
Nikesh Arora
Chairman and Chief Executive Officer

I think the best way to think about it is that. The software side of that business continues to see strong growth. The SASE pieces, the Prisma Access pieces, the SD-WAN capability in CloudGenics, that is also where we capture our subscription growth. Our subscriptions have gone from four to eight. We just launched DLP, which is getting sort of lots of interesting, a lot of interest from our existing customers. IoT, which is very early still for us, is also getting a lot of interest from our customers. SD-WAN ends up being part of a larger SD-WAN sort of infrastructure deal where They will turn on the SD-WAN capability in the firewall, and then they will also buy pure SD-WAN with CloudGenics. And the architectures work, so they work together. So we expect most of the growth is going to come from the software side of the house. As we shared, the VMs have gone over 10,000 customers. We've seen a lot of interest and activity there in the VM space. As we highlighted, we've launched the 5G capability, containerized firewall 5G capability, which is unique in the industry. We're going back to our service provider partners and saying, look, this is what you need. to get 5G done right and to help your customers leverage 5G use cases that they're deploying. So I expect a lot of the growth should come in the software side. The hardware customers are mostly refresh and some are existing customers. In some cases, you'll see people go away from legacy vendors who provide hardware firewalls. Sometimes we'll see hardware wins, which come as part of an overall platform deal where people want to deploy the entire PowerAltra blueprint across their infrastructure. Hardware is harder than software, especially in the current environment.

speaker
Keith Weiss
Analyst at Morgan Stanley

Got it. Excellent. Super helpful. Thank you.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Fatima Bulani from UBS. Good morning.

speaker
Fatima Bulani
Analyst at UBS

Thank you for taking the questions. Can you hear me?

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Just for you because you didn't believe that we were growing a business on the other side.

speaker
Fatima Bulani
Analyst at UBS

I could see that. Thank you for that. I'll keep it tight. Nikesh, if I can ask you to put a MITS hat on for a second. Into fiscal 21, you're going to have an even bigger portfolio than you did in fiscal 20. So I'm wondering if you can speak to or at least quantify to what extent enterprise adoption agreements or enterprise licensing style agreements are becoming a bigger part of your overall sales motion, particularly as you look to drive more next-gen solution adoption activity.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

You know, enterprise agreements typically kick in stronger in renewals than in the first phases of our deal. So a lot of the deal, a lot of the original, you know, The early business comes as on a product by product basis until we get to a scale where customers says, wait a minute, it makes much more sense for me to go consolidate all this stuff. It's rarely you'll see somebody walk in and say, I want to do a $20, $30 million deal and let's go rip out everything in our infrastructure and replace it with power networks. We see that it happens incrementally over time with our customers. As they get one product, they enjoy it, they get the next set of products. And we've seen that happen on a recurring basis the last two, two and a half years I've been here. We expect they will continue to be important. But they typically kick in a renewal. So we have reasonably good visibility as to which customers are up for renewal, where it makes sense for them to be pitched an enterprise agreement. But they play their fair role in our renewal capability. Well, we make sure that our teams understand that you cannot just renew somebody and call it an enterprise agreement. There has to be a significant amount of upsell and deployment of new products into the customer base before it qualifies for an enterprise agreement. And his hat is a little smaller. I tried on the weekend.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Jonathan Ho from William Blair.

speaker
Jonathan Ho
Analyst at William Blair

Hi, good morning, and congrats on the strong results. I just wanted to start out with getting a sense for how the integration with Cloud GenX is going and maybe what the initial customer feedback has been with the combined products. Thank you.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

I'm going to have my friend Lee Clarich answer that question since he's been sitting just smiling. Go ahead, Lee.

speaker
Lee Klarich
Chief Product Officer

Thank you, Nikesh. Good question, Jonathan. What we've seen in the SD-WAN space in particular is, even though it provides obviously a lot of value to customers, it still can be very clunky. It can still be very difficult to roll out, deploy, operationalize. And obviously, with our approach with CloudGenics, we think we address many of those challenges. But further the integration with Prisma Access, where we can also deliver the cloud network and integrate those two together. And as you heard Nikesh say earlier, we recently introduced an ability for those to be deployed with basically one-click integration. And so all of that combination that we bring together as SASE is starting to resonate with our customers. And we see that as the future architecture for how customers are going to connect their branch offices, remote sites to a cloud-over-network with cloud security and address those deployment challenges while gaining the best security they can.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Brian Essex from Goldman Sachs.

speaker
Brian Essex
Analyst at Goldman Sachs

Hey, good morning, and thank you for taking the question. Thank you for me as well on the additional metrics around NGS. It's really helpful. I know investors have been waiting a while for that. Maybe, Nikesh or Luis, how should we think about two things? One, the gross margin progression, is that just a function of the delivery on cloud infrastructure? And then two, seasonality. So comparing this to your overall business from a margin perspective, at what rate might this business be in parity with the rest of the business? And then from a seasonality perspective, I noticed that billings were seasonal this quarter, similar to the larger business. How do we think about that on a go-forward basis? Thank you. Okay.

speaker
Luis Visoso
Chief Financial Officer

Yeah, I think we, you know, to the second part of your question, we will always see a little bit of a seasonality with Q4 being stronger than Q1, right? So that would be kind of normal. In terms of gross margin, yes, we have strong plans, as you would imagine. And as Nikesh mentioned, we do expect to get very competitive gross margins over the next few years. We have very clear plans that include efficiencies in our cloud and AI business. So you should expect that business to significantly improve over time. And as I said, we have very concrete plans to achieve that.

speaker
Brian Essex
Analyst at Goldman Sachs

Is it maybe just on infrastructure side, or is there something else driving that margin?

speaker
Nikesh Arora
Chairman and Chief Executive Officer

As I mentioned right on the last call, the two largest parts of the gross margin are clearly our cloud infrastructure pieces. And we have worked hard both in Lee's team and in Louise's efforts in trying to reduce those costs down. And we have a very clear line of sight as to how and when those costs will go down. So we're very comfortable saying that those gross margins should improve significantly in the next two to three years. That's one part of it. The other part is, as you know, this is a revenue against cost metric and revenue comes in ratably the costs come in front-loaded in customer success. Our deployment costs and customer deployment requirement is like we have to deploy a million-dollar deal in two months right now. At our cost of deploying the deals now, the million dollars come over three years. So you will see as that business scales, the customer success pieces in the pre-growth margin numbers become relatively smaller compared to the total revenue size. So that also gives you a natural margin progression in the right direction. Fair enough. Thank you.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Phillip Winslow from Wells Fargo.

speaker
Phillip Winslow
Analyst at Wells Fargo

Great. Thanks for taking my question. And again, thanks for the added transparency in terms of disclosure. Obviously, a very strong quarter with a lot of very positive metrics here. One that really stood out to me was on Prisma Cloud, customers using compute. You know, shift left security is something that we've been focused on for a while, but it feels like that's hitting an inflection point. So I guess a question for Nikesh and Lee. What are you hearing from customers about sort of adoption of compute, sort of understanding of sort of the evolution of security in the cloud?

speaker
Lee Klarich
Chief Product Officer

I think we've maybe mentioned before, I think a lot of early cloud adoption from enterprises was sort of more lift and shift. We saw take an application with the data center and simply move it to the cloud without re-architecting it, without leveraging a lot of the benefits of the cloud. And the more mature companies from a cloud perspective are now taking more of a cloud native approach. And those cloud native approaches sometimes is obviously leveraging PaaS services, but one of the key aspects is increasingly using containerized security architectures and deployment architectures. Interestingly enough, that also sometimes comes back on premise as well. And so as there is a greater and greater usage of containerized architectures, cloud native architectures, the Prisma Cloud compute security capabilities become very important. And this obviously for us comes from the acquisition of Twistlock we made about a year and a half ago. And at the time it was best in class. We continue to invest in it and continue to receive great feedback from our customers when they do take advantage of it.

speaker
Phillip Winslow
Analyst at Wells Fargo

Great. Thanks, team. Keep up the great work. Thanks, Will. Thanks.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Gray Powell from BTIG. Hey, Gray.

speaker
Gray Powell
Analyst at BTIG

Thanks. Can you hear me OK? Yep. Cool. So yeah, I maybe want to go back to an earlier question on the core firewall side. How should we think about attached subscription growth on the core firewall side? Because I think you have Four new subscriptions. Some of them seem to be getting pretty good traction. You've introduced a higher cost premium support tier. But at the same time, product revenue growth is flattening out, which means that the installed base that subscriptions can attach to is flattening out. So I'm just trying to think like how those two things should net against each other.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Well, they shouldn't net against each other because you see the four new subs that we've added, we believe should be applicable to majority of our customers. And most of our customers don't have them. I mean, the one which has seen some traction, which we talked about last quarter was our DNS security sub, which has penetrated over five or 6% of our base. So we expect there is still a lot of runway in the new subscriptions to be able to penetrate our base of 70 plus thousand firewall customers. So we don't think that, that should all be on top of the product base that we have out there. And whilst product revenues are flat, our install base continues to rise because this is a one-time sale. Every time we sell, it's to hopefully a new set of customers and over time, some of them renew. So I think you're still seeing customer growth acquisition, as is evident from the 8,000 new customers we have between last year and this year. All those are prime candidates for subscriptions that get attached. In addition to that, some of these customers, whilst they might be flat on product revenue, they're deploying Prisma SASE or Prisma Access, also deploying VMs, where VMs and Prisma Access also allow you to attach subscriptions. These subscriptions are not specific only to our hardware business. You can get, as of soon DLP with Prisma Access. You can get IoT with Prisma Access. So our subscriptions go past. They apply not only to the 70,000 hardware customers, they apply to a significant part of our 10,000 software virtual firewall customers or 1,000 Prisma SASE customers.

speaker
Gray Powell
Analyst at BTIG

Got it. That's really helpful. Did you say DNS is already at 5% to 6% penetration? I thought that's only been out like a year.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

About 18 months. Yeah, I'd say we said 3000 last quarter 3000 I think my math says is approximately Math is good. My math is good. Yeah. Early in the morning. Just trying to make sure I 5% was right.

speaker
Karen Fung
Senior Director of Investor Relations

Next question comes from Andy Newinsky from DA Davidson.

speaker
Matthew Hedberg
Analyst at RBC

Hey, great. Thank you. Congrats on a good start to fiscal 21 You know, At a high level question, when you look at the thousands of new customers you added this quarter, I'm curious what percentage started with just your cloud AI products, or do most customers start with the network security products? Just trying to get a better understanding of which one's driving your new logo growth. Thanks.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Yeah, my CFO will not let me tell you the number of exact number of new Cloud AI customers, but I will tell you there's a significant part of both of the Fortune 100 Global 2000 days where they have no interest in some of our hardware products because these are born in the cloud companies or they're going through a cloud transformation. So we are seeing a reasonable number, a significant number of customers be our first time customers in Prisma Cloud, customers who had no interest in buying a firewall because many of them don't have a substantive data center, but they have a cloud presence because that's kind of what they chose to go with. And now with the eight modules, seven modules we provide in Prisma Cloud, they find it interesting to go down that platform route. Many of our customers who are on the defense side or the financial services side where we've not had such a strong presence are getting, we're seeing renewed interest both in the cloud transformation as well as the data collection capabilities of Cortex-XDR. and hopefully expands in the future. So we're seeing a new set of customers we're able to address with our Cloud AI solutions, which we were not able to address with our hardware capabilities. Thanks, Nikesh.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Saket Kalia from Barclays.

speaker
Saket Kalia
Analyst at Barclays

OK. Hey, good morning. Can you hear me OK? Yes. How are you? Okay. Excellent. Good. How are you? Um, Louise, maybe, maybe for you, uh, maybe just shifting gears to profitability for a second. I think the operating margin guide for fiscal 21 is going up slightly. And I believe that that too is consolidating the expanse cost base that maybe, maybe the first part of the question, am I thinking about that? Right. And then secondly, more strategically, what longer term on that cloud and AI business, Who do you sort of benchmark yourself against in terms of where that profitability can go long-term?

speaker
Luis Visoso
Chief Financial Officer

Yeah, so your first question, yes, margin is up slightly year over year. So yes, we're raising our guidance on margin. So you're right. And you're also right. Our fiscal year margin is impacted by expense, which we basically offset all of that, right? So we factored that in and we covered the cost. And even despite of that, we're going up. And yes, we're benchmarking ourselves against the best you have in the market, right? And we want to get towards those margins as well. And we think it's very reasonable to do that as we gain scale and as we deliver the savings that we talked just a few minutes ago, right? Some of the savings that we are working with Lee and his team and some of the savings that we think we can get just as we gain more scale. So that should clearly improve. But that's kind of where we're going. Think about some of the best in class companies out there and that's what we're benchmarking against to deliver.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Sake, just to add to that, and this is not a reporting question, part of the reason we wanted to make sure you understand this split and the difference in the two businesses is you want to reinforce that our firewall business is as good as any other firewall business out there in the industry because I got calls about, hey, you're seeing overall decline in gross margins because their firewalls are under pressure. No, it's not. I think the other part I want to make sure you see is that it's kind of like maybe we're too inward looking, but It's very hard to build a $735 million ARR business from scratch in 18 months. I want to show you that we're building that business in parallel to continuing to focus on a firewall business. And to an extent, the overall gross margin and operating margin are somewhat not fully in our control as management. And we want to show you the reason that we're investing on the right-hand side is because we can drive that ARR growth at very high double digits for a longer period of time. For that, we need to continue to invest. And we're just showing that when we invest, you'll see the transparency where we're investing, where we're not investing, where we're leveraging and showing your expansion, where we're continuing to invest. We're investing in both, obviously not to the same levels. Prisma SASE is a brand new product category for us in our firewall business. And to be honest, I will tell you this, in two years from now, when you look back, you'll say, damn, you guys did a great job transforming your business to hardware to software because... There's a high probability the industry starts to slow down on hardware because people realize they're moving faster than network transformation and cloud transformation. And when that happens, you need two years of prep work to get there.

speaker
Andy Newinsky
Analyst at DA Davidson

Very helpful. Thanks, guys.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Patrick Colville from Deutsche Bank.

speaker
Patrick Colville
Analyst at Deutsche Bank

Hey there. Thanks again for the new disclosure. I was going to echo the others. I mean, absolutely awesome to see that. So I just want to circle back to Fatima's question about enterprise agreements. So can you just help us understand, I guess, at Palo Alto Networks, what you define as an enterprise agreement versus just a kind of regular multi-product deal? And the reason I ask is because we know in our conversations with resellers, we're hearing Paul Alto and enterprise agreement a lot more. So I guess, and I guess the second part of my question is, you know, is there any disclosure you can give us around what proportion of billings are from enterprise agreements? Thank you.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Thanks, Patrick. Thank you for the, the congratulations. And first of all, as I'm looking at Lee, just to confirm what I'm going to say is that we have no enterprise agreements where we blend cloud AI and network security. We don't. So first and foremost, any of the cloud and AI stuff does not get bundled with our hardware deals or does not get bundled with our software deals. You probably have no enterprise agreements where we blend all of our Prisma SASE and hardware and software firewalls. We don't. So Prisma SASE deals are also independent of that. So most of our enterprise agreements are still firewall plus subscription agreements. whether they're hardware and software and a subscription. There's still the agreements that have continued to power networks for the last 15 years. None of the new stuff is included in enterprise agreements because we don't believe that we have to create cross-product discounting to try and encourage customers to use them. We want our new products to stand on their own and be sold on their own and be able to be on a consumption model, which is much more transparent and much easier to manage if they're not part of a large bundle discount deal. So that's answer number one. Our enterprise deals refer to hardware plus subscription updates. So in that context, any customer who wants to do an enterprise agreement with us is probably an existing hardware customer with subscriptions where they're going to buy more subscriptions and promise to buy more hardware from us over the next three years. And that's why you do an enterprise agreement. Say, hey, I'm going to go from 100 firewalls to 200 firewalls. If I paid you so much money for all your subscriptions in the next three years, can I have a deal where I don't have to keep paying every time I buy a new firewall for subscriptions? So most of our enterprise deals take on the form of if you commit to a large amount of hardware purchase, you can get a bundled price for subscriptions, which you don't have to pay incrementally for. That's the nature of our deals. Hence, our EAs are pretty much dependent on our hardware business. And as I said to a question earlier that most of our EAs are based on renewal deals because nobody walks in upfront saying, I want to buy in the state of thousand firewalls tomorrow, sign me up. It's typically, I've got 200 more. I'm going to get 200 because I'm through a transformation of Palo Alto Networks. Can I just re-up and get a renewal of a larger number if I commit to more hardware because I love your product?

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Matthew Hedberg from RBC.

speaker
Andy Newinsky
Analyst at DA Davidson

Hey guys, thanks for taking my question and I'll offer my congrats again. The disclosures are really, really helpful. I guess I have a question for Lee. In a post-COVID distributed world, you know, I have to think DLP takes on a new level of importance. Can you talk a little bit more granular about how you guys differ in your approach to cloud DLP versus others and how much of that is a new business, i.e., you know, as a result of distributed work or increased cloud migration or how much of it is legacy DLP replacement?

speaker
Lee Klarich
Chief Product Officer

Yeah, thanks for the question, Matthew. You look at the GDP market, it's been around for a long time. It hasn't changed a whole lot during that time. And it was therefore designed and architected for a very on-prem world. largely assumes that employees all show up to the office, applications are all in the data center, and everything's sort of well contained. As you look at today's world, users are, employees are working from anywhere, applications are increasingly running in the cloud, and that legacy DLP on-prem architecture does not work as well anymore. And so What we've done is built a DLP service that runs in the cloud and then can connect into all the different enforcement points that are needed, whether that's one of our hardware devices in the data center or prem, whether that's Prisma Access, whether that's Prisma Cloud for cloud workload and storage security. And so we can take that single DLP cloud engine and integrate it with all of those enforcement points really designed for this new way in which networks are deployed, applications are deployed. And so we think that's a very more appropriate architecture. And we're getting, you know, it's early, but we're getting very positive feedback from our customers and interest in that approach.

speaker
Andy Newinsky
Analyst at DA Davidson

Thank you.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Rob Owens from Piper Sandler.

speaker
Rob Owens
Analyst at Piper Sandler

Good morning, and thank you for taking my question. Given you're the first to report in October quarter on this really early Monday morning, I was curious if you can give us kind of a broader read in terms of what's going on internationally. It looked like domestic was strong, but rest of the world growth rates ticked down a little bit versus where they were in the back half, or even the quarter from a linearity standpoint, given your days billings outstanding ticked up, I guess, on a year over year basis and ran a little higher than it was previously. Thanks.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Um, there's, there's a varied impact around the world, given where people are on this pandemic scale and degree of, you know, difficulty in terms of being able to execute in their own environments here, we still see that, you know, different parts of Asia are doing better than the others, because they're going through their, their motions of trying to deal with the pandemic, see similar behavior in Europe, we saw an early part of the quarter was was normal in Europe, it's gotten subsequently harder because Europe has started to shut down. So we're seeing different impacts across the board. But as you know, these deals don't happen in days. These deals happen in months. So there's always work that's been going on for the last many months for these deals to culminate towards the end of the quarter. generally speaking, as I said, you know, Europe is okay. Asia is, is scattered. The U S continues to be strong. I think, uh, as I said, we are going to get tested in the, and I don't mean COVID testing, the COVID is going to test us. You do get tested pretty much very often, but COVID is going to test all of us in the next three months, because I think the winners, uh, you know, winner is coming. And, uh, we're hoping that all the work that the teams have been able to do in the last few months will bear through the winner. But, uh, Yeah, I think international continues to be, look, there's two parts to it. One is native strength, the other is investment. So we are continuing to invest internationally because we were not as well invested, I would say, internationally two, two and a half years ago. We're making investments around the world. We're also investing in making sure cloud and AI businesses are visible across various customer bases because in many cases, the hardware business you know, hadn't been able to be of much significance in many countries around the world, but we're going back and reinvesting in cloud and AI. So I think that counteracts some of the natural weakness based on the pandemic, but we'll see what happens in the next three months.

speaker
Rob Owens
Analyst at Piper Sandler

All right. Thank you.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Greg Moskowitz from Mizuho Securities.

speaker
Greg Moskowitz
Analyst at Mizuho Securities

Okay. Thank you for taking the question. Nikesh, your next-gen security ARR and billing growth for me is impressive, especially now that you're lapping tough comps. What I'm wondering is, what are the one or two MGS products that haven't yet contributed much, but that you think is only a matter of time before they move the needle on growth?

speaker
Nikesh Arora
Chairman and Chief Executive Officer

That was quite an impactful way to end the question. The NGS products, it's kind of interesting. If I parse them down, we include Prisma, SASE and NGS. We continue to see tremendous amounts of traction in Prisma, SASE. Prisma access continues to go from strength to strength. As I mentioned, we think we're four or five, 10 quarters ago, Prisma Access was GPCS. It didn't kind of have enough traction. Now we see tough comms being lapped with great numbers, partly driven by the pandemic response, partly driven by the fact that, you know, finally near standing at the top of the roof and claiming that proxy solutions don't fully work. Somebody is hearing him because people want a full stack firewall in the firewall, in the cloud. So a lot of success to Prisma Access from. We think that continues to sustain itself with SD-WAN and SASE going forward for the next few years. On Prisma Cloud, it's kind of a different story. It is kind of like, we'll see more benefits in the future because right now we're in expand mode, land mode, and we're getting more and more customers, but really we are dependent on the customer's ability to transform their existing infrastructure to the cloud. So we're getting in there, we're getting our modules in, we're trying to go do upsells, get them to use more and more of our product. You know, as they spend more, put more workloads in the cloud, Prisma Cloud will see continued ARR growth in the future. On the Cortex XDR front, it's competitive with the many XDR vendors out there. Again, we're seeing traction because we have a large install base of traps, which many of it is converting to XDR. We're also seeing new customers where we compete in the likes of Silence, CrowdStrike, and SentinelOne, et cetera. And there we think, you know, XSOR we think is now way larger than any other automation product out there from a security automation perspective. And we think the combination of Xpans and XDR and XSOR holds tremendous promise, but I think that's more a, next fiscal year thing. This fiscal year, I expect Prisma Access, I expect the Prisma suite to do really well and XDR to do really well independently. I think we'll see more and more expands plus XDR in the next fiscal year. That gives you a better sense. And of course, VMs continue to do great for us because people are finally realizing you can put a virtual firewall against your cloud instance and they need one.

speaker
Karen Fung
Senior Director of Investor Relations

Our next question comes from Taliani from B of A. Okay, I don't think we have Tal, so I'll move on to our last question. It will come from Brent Thill from Jefferies.

speaker
Brent Thill
Analyst at Jefferies

Thank you. Nikesh, just on the go-to-market this year, can you speak to any changes that you're making in the go-to-market motion? Is it anything new this year, largely unchanged from last year?

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Kevin, thanks for the question. Look, last year, the year before that when I started, we had a large kicker to get our NGS jumpstarted. And hopefully a billion dollars ARR by the end of this fiscal year tells you that we were able to jumpstart it, although that caused some consternation in our product business, as you guys are fully aware of. So we normalized that last year. So we did not create that much of a jump between NGS and product and things have stabilized. I'll tell you that the one change we made this year, and you should see it in the left right and right hand side we show you, We have focused our cloud AI team to build ACV and ARR. And our network security business is more TCV oriented. So if you were ever to see an impact or show up and say, what's going on with your billings versus ARR? And that's why we started this disclosure today about showing you the left-hand side is very focused on revenue, operating margin, gross margin, and billings. The right-hand side is very much an ARR business because we believe that The huge opportunity we have in front of us should be focused on a CV and that's why you know answering patrick's question about. What do we do with the years I don't want to I don't want to bury next generation recurring revenue products in the years, because sometimes he is you get customers buying a lot of stuff and they choose what they want to use later i'm focused on making sure every one of our cloud and the product gets deployed. The time to value is very high or short. The time to value is short and value is very high. I want to make sure there's consumption increase. I want to make sure there are contracts in place to allow people to spend more as they consume more. So the big shift we made this time, a big or minor shift, is that we made sure people focus both on the ARR side, the DCV side, and our sales team. As you can imagine, we didn't have an ARR business. We can report ARR, but we didn't have an ARR focus on our firewall business. Does that help to answer the question? Thank you.

speaker
Karen Fung
Senior Director of Investor Relations

That concludes the Q&A portion of our call. Thank you all for your questions. I'm going to turn it back to Nikesh for closing remarks.

speaker
Nikesh Arora
Chairman and Chief Executive Officer

Well, thank you, Karen. And thank you, everyone, for dialing in. And I want to. normally not what I would do in an earnings call, but I want to applaud the work of Louise and our finance teams. This was a tough close to get done in 10 days before our user conference. At the same time, based on your feedback, we spent a lot of time with auditors and others to make sure that we were able to show the split because all of you wanted more transparency in our cloud AI business network security business. I hope you see by this disclosure, we are building two great businesses of power networks, and we are going to continue to focus on trying to build share of our value across both these segments. We'll keep looking as to what's the best way to increase more transparency and see if it makes sense in the longer term to be more regular about these updates. But hopefully you found that disclosure useful. I want to thank you again. I wish your families and you a very safe and happy Thanksgiving next week. We look forward to seeing many of you in our upcoming weeks at our investor conferences. I know I'll be talking to some of you shortly after. I also want to once again shout out to our Palo Alto Networks family, our employees, our customers, and our ecosystem. Thank you very much, everybody, and go Palo Alto Networks.

Disclaimer

This conference call transcript was computer generated and almost certianly contains errors. This transcript is provided for information purposes only.EarningsCall, LLC makes no representation about the accuracy of the aforementioned transcript, and you are cautioned not to place undue reliance on the information provided by the transcript.

-

-