Image source: The Motley Fool.
Palo Alto Networks Inc (PANW 0.11%)
Q3Â 2019 Earnings Call
May 29, 2019, 4:30 p.m. ET
Contents:
- Prepared Remarks
- Questions and Answers
- Call Participants
Prepared Remarks:
Operator
Good day and welcome to the Palo Alto Networks Fiscal Third Quarter 2019 Earnings Call. Today's conference is being recorded. At this time, I would like to turn the conference over to David Niederman, Vice President, Investor Relations. Please go ahead.
David Niederman -- Vice President, Investor Relations
Good afternoon, and thank you for joining us today on today's conference call to discuss Palo Alto Networks fiscal third quarter 2019 financial results. This call is being broadcast live over the web and can be accessed on the Investors section of our website at investors.paloaltonetworks.com. With me on today's call are Nikesh Arora, our Chairman and Chief Executive Officer; Kathy Bonanno, our Chief Financial Officer; and Lee Klarich, our Chief Product Officer.
This afternoon, we issued a press release announcing our results for the fiscal third quarter ended April 30, 2019. If you'd like a copy of the release, you can access it online on our website. We'd like to remind you that during the course of this conference call, management will make forward-looking statements, including statements regarding our financial guidance and modeling points for the fiscal fourth quarter and full fiscal year 2019. Our competitive position and the demand and market opportunity for our products and subscriptions, benefits to us and our customers and timing of new products and subscription offerings, including those from our proposed acquisition of Twistlock and PureSec, continued investment in our products, our ability to drive outsized growth rates and trends in certain financial results, operating metrics, mix shift and seasonality.
These forward-looking statements involve a number of risks and uncertainties, some of which are beyond our control, which could cause actual results to differ materially from those anticipated by these statements. These forward-looking statements apply as of today and you should not rely on them as representing our views in the future and we undertake no obligation to update these statements after this call. For a more detailed description of factors that could cause actual results to differ, please refer to our quarterly report on Form 10-Q filed with the SEC on February 27, 2019, and our earnings release posted a few minutes ago on our website and filed with the SEC on Form 8-K.
Also, please note that certain financial measures we use on this call are expressed on a non-GAAP basis and have been adjusted to exclude certain charges. For historical periods, we have provided reconciliations of these non-GAAP financial measures to GAAP financial measures in the supplemental financial information that can be found in the Investors Section of our website located at investors.paloaltonetworks.com.
And with that I will turn the call over to Nikesh.
Nikesh Arora -- Chairman and Chief Executive Officer
Thanks, David, and thank you everyone for joining us this afternoon for our fiscal third quarter 2019 results. I'm very excited to be here with you today. This call marks my fourth earnings call as CEO and brings me close to my one-year anniversary with the Company. We've accomplished a great deal this year, furthering our leadership in cyber security and also setting the foundation for our future growth. When I joined Palo Alto Networks, my primary impression was how cyber security is poised to increase in importance to organizations globally and also how the cloud revolution was set to impact the industry. The key themes in my first call were integration, cloud and more automation.
I'm pleased to report that after nearly a year on the job, my confidence on these trends are stronger than ever. Moreover, I'm delighted that we have made progress across all these imperatives and will continue to do so. On today's call, I will briefly go through our financials and then provide an update on our three strategic focus areas. Securing the enterprise, securing the cloud, which is where I will spend most of my time, given our announcements in this area today. And finally, securing future with Cortex. Starting with the financials, I'm pleased to report that as we continue our transformation the team continues to deliver. We had yet another solid quarter. Fiscal Q3 revenues of $727 million represents year-over-year growth of 28%, and non-GAAP earnings per share increased by 26% to $1.31.
Diving into the details of our three focus areas. Let's first talk about securing the enterprise. We continue to see success around the world with our Next Generation Firewall offering. Network security remains a top priority for companies and (inaudible) and we continue to outperform this aspect of the market. Our new products introduced last quarter are performing well. We've had a number of significant wins this quarter. Here's a couple, I'd like to highlight.
We signed an 8-figure deal with the US Government agency. This is one of the 10 largest deals in the history of Palo Alto Networks and contributed to our strength and product revenues this quarter. We expanded our footprint more than $5 million each, with 10 existing customers, many of the whom bought a combination of new use cases and also hardware refreshes. This includes deals, one of the best-known brands in the world, a Fortune 50 technology company and a Fortune 500 consumer finance company.
And finally, we introduced DNS security service, new attached subscription to our next generation firewall. DNS is already quickly gaining traction and while it's early days to share metrics around this offering, I can safely say that if DNS were an independent start-up company, it will be getting a lot of attention. We excited by it's early success and optimistic for it's future prospects. Our core business continues to be strong, with customers becoming more security aware and looking for simplicity in their infrastructure. We continue to make it easier to deploy more services in our firewalls in the most secure way and you should expect us to add more capability here.
Now let's talk about securing the cloud. We continue to be highly focused on delivering technology that enables our customers in their cloud journey. We plan to enable this by delivering a comprehensive set of security capabilities across a broad set of clouds and cloud configurations. This focus and our speedboat approach has led to tremendous progress over the past year. With this, we're delighted to introduce Prisma. Prisma announced this morning brings our industry-leading cloud solutions within a single suite to help our customers in their cloud journey. Whether you want to connect your mobile users or branch offices to the cloud, protect your application, the data in the public cloud, protect your SaaS applications or are worried about upcoming trends of good data security service computing, Prisma has a solution.
Prisma is our approach to deliver industry-leading cloud security products in an integrated fashion. It will address SaaS, API based and in line cloud security across all vectors. We will continue to build on Prisma over the coming quarters and years to make it the industrial leading platform for the journey to the cloud. We believe Prisma is already the number one suite of cloud security product in the world. This quarter Prisma surpassed a $0.25 billion billings run rate and has approximately 9,000 customers. The products that comprise Prisma are already industry-leading in their own right, take the VM-Series. We believe -- we deliver the most VM's across the public cloud landscape with more than 66 figure or higher deals this last quarter alone.
RedLock, which forms the basis for Prisma public cloud, surpassed the $100 million billings run rate this quarter, what is even more exciting is that we won more than 10 RedLock deal each over $0.5 million in the third quarter with over half of them in the Global 2000. This is a rare feat, to acquire a company, transform its revenue and its profile and trajectory of six months is unheard of. Additionally, we are very excited about the new enhancements for our global product cloud service. The next version includes cloud onboarding and management interface, and will be available in the Google Cloud platform shortly.
In this quarter, we continue to have success on GPCS by securing 40,000 mobile users at the biggest car company in that category, 27,000 mobile users at a leading global consumer brand and 25,000 mobile users at one of the largest high-tech company in the world. The success of RedLock is a key factor and making us number one in Cloud Security and gives us the confidence that our introduction of the Prisma suite will boost our ability to keep winning in the space. In addition, today's announcement of our intent to acquire Twistlock, which is the best in its category for container security will bring best-of-breed products into the Prisma suite.
Containers are one of the fastest growing segments of both private and public cloud workloads and we're looking forward to offering security to our customers. We also announced our intent to acquire PureSec, a leading provider of serverless security. These proposed acquisitions will further enhance our Cloud Security suite. Other example of our ability to acquire companies and accelerate their performance is Demisto, which brings me to third key focus area securing the future with Cortex. We closed the acquisition of Demisto at the end of March and in our first month operating together I'm pleased to report that sales are already doing exceptionally well.
Demisto's multi-vendor orchestration capabilities, analytics and playbooks are unique, they help our customers further automate their security operations and allow them to focus on solving the most complex threat. This quarter, we also notable for the introduction of Cortex XDR at the end of February. In it's first quarter of availability, we closed over 50 deals and the pipeline is strong. XDR is the successor of EDR. XDR enables teams to stop sophisticated attacks and adapt their defenses to prevent future threats, by integrating network endpoint and cloud data to reduce the signal-to-noise ratio of plaguing security analysts.
In fact earlier today, MITRE released test results validating the capabilities of Traps and Cortex XDR. The result from MITRE ATT&CK testing confirm that Traps and Cortex XDR provide the broadest coverage against different attack techniques with the fewest missed attack out of all 10 vendors recently evaluated. We also had some notable Cortex XDR wins this quarter, including a 7-figure deal with the US health insurance care organization with over 26,000 employees, a win at a major Asia based airline and a win in one of the largest cities in the world.
To wrap up, we had a solid quarter of enterprise execution with strong progress in the cloud, and with the initial rollout of Cortex. We continue to see the opportunity to expand our market leadership to be one of the platform for both today's security needs and tomorrow. As my first year comes to an end, I would like three observations and reiterate a few things. One, we will continue to expand our leader -- lead as the number one cybersecurity company in the world, one that provides simple, integrated and leading products to help our customers.
The company I walked into had done a great job in building the world's best firewalls and expanding their ability to secure the enterprise. Over the last year, in addition to strengthening our firewall business, we have made tremendous progress in areas, which will become equally, if not more important, the cloud and automation. My year here has convinced me that we have the right strategy and the right team and we're making the right moves. Transitions take time, this one will also take time, but there is no team better prepared than us to make this happen.
The new products and delivery mechanisms are more SaaS based and have a different consumption model and that many cloud customers purchase annual subscriptions rather than multi-year deal. The brilliance of the SaaS model though is the annual recurring revenue stream. As we evolve our business, maximizing this recurring revenue stream will be our primary focus. While this may impact total billings, we would expect to see better margin performance. And most importantly, underlying this trend is a growing demand for our products, which is what matters. Reading some of your notes, I know that you're watching the internal management moves we're making. You should know that any leadership moves that we are making are being made in a thoughtful manner and for right reasons. Rest assured, while I might not have spent time in cybersecurity, I know how to build great teams. This is an area, me and the team are extremely vigilant and focused on.
I'm confident that one year out stronger, we've better focus, a more robust product roadmap and our teams are poised to win. This is the time to believe in our plans and our ability to execute on our strategy to win, increasing addressable market in our industry and our quest to increase our lead as the number one enterprise security company in the world.
And with that, I'll turn the call over to Kathy.
Kathy Bonanno -- Chief Financial Officer
Thank you, Nikesh. Before I start, I'd like to note that except for revenue and billings figures, all financial figures are non-GAAP and growth rates are compared to the prior year periods unless stated otherwise. All current and prior period financials discussed are reflected under ASC 606 as we adopted the new standard as of August 1, 2018.
In the third quarter, we continue to add new customers at a healthy crisp and further expand our existing base. We did this while balancing investments in our recently acquired businesses and maintaining a focus on profitability. In Q3, total revenue grew 28% to a record $726.6 million. Looking at growth by geography, the Americas grew 28%, EMEA grew 26% and APAC grew 29%. Q3 product revenue of $278.4 million grew 28% compared to the prior year. Our SaaS-based subscription revenue of $258.8 million increased 35%. Support revenue of $189.4 million increased 20%. In total, subscription and support revenue of $448.2 million increased 28% and accounted for 62% share of total revenue.
Turning to billings, Q3 total billings of $821.9 million increased 13%. Q3 current billings were $799.5 million net of acquired deferred revenue, up 25% year-over-year. The dollar-weighted contract duration for new subscription and support billings in the quarter remained at approximately three years, but declined by four months year-over-year due to the strength of our cloud business and fewer multi-year deals. Total deferred revenue at the end of Q3 was $2.6 billion, an increase of 27%.
In addition to robust new customer acquisition, we continue to increase our wallet share with existing customers. Our top 25 customers, all of which made a purchase this quarter, spent a minimum of $38.7 million in lifetime value in Q3, a 35% increase over the $28.7 million in Q3 of fiscal '18. Q3 gross margin was 76.5%, which was up 30 basis points compared to last year. Q3 operating margin was 20.9%, a decline of 50 basis points year-over-year and includes a headwind of approximately $7 million of net expense associated with our recent acquisition. We ended the third quarter with 6,503 employees.
On a GAAP basis for the third quarter, net loss declined by 50% to $20.2 million or $0.21 per basic and diluted share. Non-GAAP net income for the third quarter grew 30% to $130.1 million or $1.31 per diluted share. Our non-GAAP effective tax rate for Q3 was 22%.
Turning to cash flows and balance sheet items, we finished April with cash, cash equivalents and investments of $3.7 billion. Q3 cash flow from operations of $296.4 million increased 23%. Free cash flow was $276.1 million, up 30% at a margin of 38%. Adjusting for cash charges associated with our headquarters in Santa Clara, free cash flow in the quarter was $279.8 million, up 27% at a margin of 38.5%. Capital expenditures in the quarter were $20.3 million DSO was 51 days, a decline of 6 days from the prior-year period.
Turning now to guidance and modeling points. For fiscal Q4 '19, we expect revenue to be in the range of $795 million to $805 million, an increase of 21% to 22% year-over-year. We expect Q4 '19 non-GAAP EPS to be in the range of $1.41 to $1.42, which includes expenses related to the Demisto acquisition and the proposed acquisitions of Twistlock and PureSec using approximately 100 million to 102 million shares.
Before I conclude, I'd like to provide some additional modeling points. We expect full-year billings to grow approximately 21% year-over-year, which includes the impact of shorter contract lengths. Our Q4 non-GAAP EPS guidance includes approximately $15 million of net expense or $0.12 per share attributable to a full quarter run rate of our Demisto acquisition and a proposed acquisitions of Twistlock and PureSec. Our Q4 EPS guidance also includes an expected $0.02 impact attributable to US tariffs on Chinese-origin goods. Excluding these acquisition and tariff expenses, we would expect non-GAAP EPS to be in the range of $1.55 to $1.56. We expect our Q4 non-GAAP effective tax rate to remain at 22%. CapEx in Q4 will be approximately $35 million to $40 million with approximately $20 million related to our headquarters in Santa Clara.
Finally, turning to free cash flow for the full year, we continue to expect an adjusted free cash flow margin of approximately 36%. The adjustments include one-time items such as the expected settlement of our 2019 convertible debt and cash flow associated with the additional investment in our headquarters in Santa Clara. You can review these adjustments to free cash flow in our supplemental financial information document, which is posted on our Investor Relations website.
With that, I'd like to open the call for questions. Operator, please poll for questions.
Questions and Answers:
Operator
Thank you. (Operator Instructions ) We'll go first to Keith Wise with Morgan Stanley.
Keith Wise -- Morgan Stanley -- Analyst
Excellent. Thank you guys for taking the question. And really solid quarter. Nick, I think you might be understating sort of operating well through transition was 27% product revenue growth against a really tough comp, that's a truly impressive number. I wanted to ask you one question and one to Kathy. The question for you is, on the M&A strategy. One of the things I think investors have been looking for a while and somebody who could effectively consolidate demand within security. It sounds like the individual companies are doing or individual solutions that you bought like RedLock are doing really well. Can you talk to us about the progress on that you've made in sort of creating a suite or getting people to buy across the portfolio and where the new acquisitions kind of fit into that suite and sort of how you expect to sort of catalyze that activity across the board?
And then for Kathy, in terms the shorter duration, can you give us some kind of indications on sort of where that impacted, was it across the board for both sort of new subscriptions as well as maintenance or is that just focused on kind of just in newer stuff?
Nikesh Arora -- Chairman and Chief Executive Officer
Thank you, Keith. Thank you for your comment and thank you for the question. Let me start talking -- answering your question around the acquisitions and launch of Prisma today. As you know, about an year ago, we started talking about how there is going to be a big move to the cloud and we were getting ready for it. Beyond Evident, Evident only worked on AWS, we felt we needed to complement that with more capabilities, we've acquired RedLock. RedLock had de minimis revenues six months ago and just shear success of RedLock that we've seen in the last six months, where we've seen customers close deals within a week. I think that's unheard of in the cybersecurity space. You walk in, you show the customer a solution and a week later you walk out of the purchase order. So that emboldened us with this notion that there not enough cloud security solutions being offered to customers or making this journey to the cloud. And if you look at the customers two years ago they were talking about in a public cloud, today they are talking about containers. And we looked in the market there are only two players and Twistlock was by far the leader, and talking to the customers they still want to buy best-of-breed. So our team made the decision that it's important for us to acquire Twistlock and integrate that with RedLock as soon as possible. So you will see us integrating both RedLock and Twistlock and then the next conversation, we want to talk about a serverless and we look to the market and PureSec by far is the leader in serverless computing -- serverless security as acquired that the same time. We intend to integrate this as soon as possible, thereby offering it fully sort of integrated Public Cloud Security suite. Our customers don't have to buy these products on containers or private cloud, public cloud, on-premise subs or serverless and that's where we see the consolidation from a cloud security perspective. We also integrated pieces of GlobalProduct cloud service with Apertures, so you can see in line SaaS security as opposed just API, which Aperture are offers. So we are driving hard and fast to try and keep creating integrations. So customers don't have to buy these products and spent time integrating. The problem of the cyber security industry has been, we are $140 billion industry with $80 billion in services and $60 billion product and $80 billion is spent, integrating the 60% products, and we want to make sure that we don't make this mistake going into cloud and that's kind of what underpins our acquisition strategy as it relates to consolidating these products and as it relates to providing a platform for cloud security.
Kathy Bonanno -- Chief Financial Officer
Yes, keep on the contract length question, as you mentioned, we did see a decline in contract length as we mentioned, four months year-over-year and there are a couple of things driving that. One is that we had very strong performance in our cloud products, mix of our Prisma public cloud this quarter was very strong. We saw terrific growth as Nikesh mentioned in his prepared remarks. So we're really excited about the trajectory of that business and the opportunity for us there. Additionally, we are focusing more on doing -- making sure that we have good annual recurring revenue in our contracts and that's our primary focus this year. And so some of its customer preference, some of it's us trying to structure deals to maximize that annual recurring revenue stream and so both of those -- the combination of those things are driving the average contract length now and we think both of those things are really terrific for our business and we're very pleased with the results.
Operator
We'll go next to Gur Talpaz with Stifel.
Gur Talpaz -- Stifel Nicolaus & Co -- Analyst
Great, thanks for taking my question. I have a question here on Twistlock and Nikesh, I was hoping you could expand a bit on the strategy. So what I want to understand is, do you view container ecosystems as a natural extension of existing networking environments, i.e., this is kind of a natural fit alongside what you already given a from a policy management standpoint and then taking one step further, can you talk about how you plan to attack the DevSecOps environments where Twistlock currently plays?
Nikesh Arora -- Chairman and Chief Executive Officer
So Gur I've always known that I should try and give only two to three sentence answer to your question, and Lee jump in because I know you're going to torture me technically otherwise. But I will tell you that the cloud world is different. In the cloud world, you have to shift left, you have to go to DevSecOps and that's where Twistlock plays because they go to the entire build, run and deploy process and that's why I think Twistlock is important, that's where I think DevSecOps is important. Twistlock has an on-prem solution, RedLock has a SaaS solution, you can logically expect us to be present in both environments because this allows us to look at both public cloud and private cloud. How am I doing so far Gur? So far so good?
Gur Talpaz -- Stifel Nicolaus & Co -- Analyst
You're doing great. Yes.
Nikesh Arora -- Chairman and Chief Executive Officer
All right. Now I'm going to take the high ground and hand it over to Lee.
Gur Talpaz -- Stifel Nicolaus & Co -- Analyst
I appreciate that.
Nikesh Arora -- Chairman and Chief Executive Officer
I think the better way to think about this is with cloud applications they are increasingly being architectured with multiple different sort of cloud services underpinning them, and whether that's PaaS services infrastructure of the service, VM's, increasingly containers are foundational component of these architectures, serverless is emerging as one of the key elements and being able to combine all of those together into a single cloud security suite, integrated together that allows the customer to see from a shift left to the build stage, all the way through runtime, the entirety of their application, how it's designed, architectured and secured, is a very powerful capability that we were able to bring together with Twistlock as a core component of that, but also PureSec for serverless and of course RedLock from a cloud platform perspective.
Gur Talpaz -- Stifel Nicolaus & Co -- Analyst
That's super helpful Lee. I appreciate it. Nice job Nikesh. Thank you.
Operator
We'll go next to Walter Pritchard with Citi.
Walter Pritchard -- Citigroup, Inc. -- Analyst
Hi, thanks. Just a question for Nikesh, on the product side. I guess one concern that may arise here, you've done a lot of M&A, it feels like your cloud strategy is largely inorganic, how do you remain convinced and see building the culture of building products organically either to keep these products going into the future or be able to address some of the new needs that come up down the road or having to spend this kind of money on M&A?
Nikesh Arora -- Chairman and Chief Executive Officer
I think Walter, that's a fair question, but if you look at our core business of firewalls, we're doing really, really good on firewalls. Our teams are innovating. We added DNS security as a service as a subscription. We are working on some more interesting things. Hopefully, we should be able to share more about them in upcoming quarters, but there is innovation going on for sure in our core business, where our firewall capabilities and other capabilities around it are developing. That's where we have strength. We have hundreds of engineers, if not thousand working on our core networking capability and firewall security capability. We also had build capability around endpoint with Traps and Secdo, which as I mentioned we got rated best in the number of unmissed attack vectors as far as MITRE test was concerned. So clearly, we have that core capability. Cloud was an area where all of you were asking the question, how will Palo Alto Networks make the transition to cloud? Do we have the core capability? I think it's fair to say we have used the RedLock contingent and the evidence team to create the core for the cloud, but at the same time, we didn't want to wait with Twistlock having over 250 customers who are using their for container securities. We didn't want to wait. We also are at the same time launching vulnerability scanning capabilities in RedLock, which is the early steps toward containers, but our customers want the entire thing. They want the full capability for better security, they want best-of-breed. So it became incumbent and imperative that we create this combination of RedLock and TwistLock. And honestly, if you go back and think the price we paid for RedLock versus the fact that it crossed $100 million run rate this quarter means we must have done a good deal, because in two quarters, we're able to take that product and deploy it to across our entire sales force. We have cloud capability. We have in our sales force, we have in our RedLock team, we have in our TwistLock team. We should be able to put the RedLock and TwistLock and PureSec capability together and use our core team and our cloud sales teams to be able to go and create more revenue in this product. Because I think right now there is a TAM of over $2 billion in cloud security, which is unserved. There are not enough products. There are not enough sales people going out and demonstrating the product to customers. So right now it's a really a question of sort of a land grab going out there and demonstrating the product to the customer, being able to deploy it in their enterprise and being able to have people who understand these products well enough to be able to sell them.
Walter Pritchard -- Citigroup, Inc. -- Analyst
Great. And then, and then Kathy, maybe a follow-up just on the duration side. Is it as simple as sort of us thinking about the unattached products, so we are going to kind of go to a one-year duration over time versus the the subscriptions that are attached to the firewalls are going to be three year and as we kind of model out those two revenue streams we would see the duration go as that mix goes?
Kathy Bonanno -- Chief Financial Officer
Yes , Walter, I think you're correct that over time as our business becomes more cloud-based and more SaaS subscription-based, we will see our customers wanting to buy the way they buy other SaaS products and that tends to be more toward a one-year duration. So over time, I do think that, that shift will happen. In this quarter though and this year, we've also been very focused on the rest of the business and just making sure that we're doing deals that preserve that annual recurring revenue stream and Nikesh is raising his hand, he wants to jump --
Nikesh Arora -- Chairman and Chief Executive Officer
I'm going to jump in Walter. I think, look, I know you guys are all getting excited about the billings number and trust me, we stated it as left, right and center to make sure that we were not missing anything in the billings number. I will tell you the underlying fundamentals of our business continue to be strong. We like the customer interest. We like the fact that they want to buy more security services from us. The two effects that are happening, one is clearly the unattached product effect, which is we are seeing better than expected growth and we're seeing shorter duration on those. And the second is to be honest, we are trying to do more new business and less business of going to our existing customers and doing multi-year bundled deals with large discounts. We've told the sales force that we'd like them to go out and get new business. As a consequence, we're not doing that many -- as many, not that many -- as many long deals, the large discounts that we used to do in the past and I think I said that I can't be more explicit by saying, we expect over time that our margins should do better as a consequence of that, and it will have an impact in the way you look at -- as the way billings mechanically calculate themselves.
Operator
And we'll go next to Sterling Auty with JPMorgan.
Sterling Auty -- JPMorgan -- Analyst
While I had a different question lined up but after that answer it really begs the question, if everything does start to triangulate toward more of an annual contract versus a three-year deal, shouldn't that just weigh on your cash flow growth until you succeed in kind of transitioning through that process?
Nikesh Arora -- Chairman and Chief Executive Officer
Look, if everything happen overnight, yes. I think there's going to be an orderly transition over time as the proportion of our non-attached business rises and as we continue to manage our long-term core business, yes. Will our cash flow profile change, yes. Will it improve our margins, yes. And that's how you transition from a business, which has been a very hardware-focused business, so business it becomes a long-term subscription and SaaS-oriented business.
Kathy Bonanno -- Chief Financial Officer
But I'll just add --
Sterling Auty -- JPMorgan -- Analyst
Fair enough.
Kathy Bonanno -- Chief Financial Officer
You know the reason we're focused on doing that is because that we believe is ultimately better for us in the long run financially and will improve our cash flows.
Nikesh Arora -- Chairman and Chief Executive Officer
Sorry, every analyst I talked -- every analyst I talked in the last month -- nine months has asked me this question saying, when will Palo Alto Networks become a ratable business, when will you become a SaaS business, you can enjoy the multiples that SaaS businesses enjoy. Well, SaaS businesses enjoy a multiple have a certain financial profile. So you can have a cake and eat it too, you want me to transition to that is going to involve a transition.
Sterling Auty -- JPMorgan -- Analyst
That's fair enough. One follow-up in terms of the business in the quarter. Looking at the support revenue growth, one question that pops to mind is, how was the linearity in the quarter and was things just more back-end loaded and perhaps that caused a lower support revenue, just on the timing of some of the product revenue that you're able to close?
Kathy Bonanno -- Chief Financial Officer
Well, support revenue growth 20% was pretty strong year-over-year and one thing to just keep in mind about support is, well, there a couple of things to keep in mind; one, it includes professional services, which can vary from year to year and quarter to quarter, and then the other thing is that, as we continue to grow our subscription business, which we've got a lot of our billings now coming from non-attached and revenue now coming from non-attached, those don't have the same concept of support attached to those offerings. So that's just another thing to keep in mind when you consider support.
Operator
And we'll go next to Ken Talanian with Evercore ISI.
Kenneth Talanian -- Evercore ISI -- Analyst
Hi, thanks for taking the question. So we are happy to see you move to a more ratable business, but how should we think about the pace at which you move to more ratable sales over in the next year or so given the additional non-attached subscriptions you're getting from these acquisitions? And you know like how soon may we see subscription surpass 50% of your billings ?
Nikesh Arora -- Chairman and Chief Executive Officer
Well, Ken, we're not going to give you forward guidance on those topics, but what I will tell you is, you can see the way our cloudsecurity business is beginning to perform. I think we said Prisma has already gone over a $250 million run rate -- billings run rate this quarter and it's growing at very, very robust growth rates way ahead of the Company growth rate, as you can imagine, and we hope that those growth rates continue, which over time will create the mix shift that is required to make a higher proportion of our business more and more ratable, which will have the impact of shorter duration in terms of impacting billings, which will have the cash flow profile changes associated with it. But I don't expect this to happen in the short order. I think this is going to take us a reasonable amount of time, but hopefully that time that we take happens at the growth rates that we're enjoying overall as a company and clearly, if we are going roughly 2.5 times the rate of the growth in industry, you must be taking share from other people in this process.
Kenneth Talanian -- Evercore ISI -- Analyst
Understood. And have you made any changes to the pricing, packaging, go-to-market for the client focus products with the launch of the Prisma branding?
Nikesh Arora -- Chairman and Chief Executive Officer
Yes. Look, as I mentioned, we had very early in this process introduced this notion of speedboats and the notion of speedboats was to have dedicated people across the organization on a cross-functional basis to make sure that we are deeply focused on making our customer successful by having dedicated customer success team, by having specialists who can go ahead and sell cloud and partner with our core sales team in accounts to make sure that the focus is not lost on our non-attached services, which is what has been paying dividends. We will continue on that track. We have dedicated teams. We have now consolidated our GPCS and public cloud speedboats into the Prisma speedboat. We've learned from the last year that Prisma as a -- the customers who are going to make this journey to the cloud are looking at all these products as a combined suite of products. So we are driving the same degree of acceleration that we have on the public cloud speedboat of the rest of our Prisma products and put them all into sone speedboat, which is led by the same people who has the public cloud speedboat. So, yes, we have made changes on the go-to-market side from a focus perspective because we don't want the smaller, faster growing business to get lost in the large expense for our core business.
Kenneth Talanian -- Evercore ISI -- Analyst
Understood. Thanks very much.
Operator
And we'll go next to Andrew Nowinski with Piper Jaffray.
Andrew Nowinski -- Piper Jaffray -- Analyst
Great. Thank you for taking the question. So maybe from a geographic perspective, I know you made some sales leadership changes in the US, your growth in the US remained relatively unchanged. However, growth in EMEA did slow. So just wondering if you can provide any more color on the slowdown in EMEA as well as any changes the new sales leadership team in North America is made.
Nikesh Arora -- Chairman and Chief Executive Officer
Well, I think, I was trying to figure out where the correlation you're going to draw us, we've made a change and nothing changed, we didn't make a change there and things got worse. So I am not sure what the implication is. But Europe had a seasonal third quarter -- like third quarters across the board seemed to be challenged. There was a seasonal slowdown vis-a-vis EMEA. The team there feels confident that they will continue marching toward our annual target. So hopefully they will make up for what they were not able to do this quarter in the upcoming quarter.
In terms of the US, we have hired a lot more people in the last quarter, which we expect to ramp up in Q4 and next year, because part of the opportunity we had was we felt that we did -- we were not knocking enough our doors, and as I mentioned, the focus on more new business. The team is strong. The team is motivated. We don't think that the leadership change in the Americas has had much of an impact in terms of the performance of the team except for the fact that they continue to be excited and motivated to keep delivering quarters.
Andrew Nowinski -- Piper Jaffray -- Analyst
I think, I guess, I was just asking the changes you made obviously had a fairly positive effect in the US, I'm wondering is there any changes needed in EMEA, was there any abnormality in EMEA to the growth fact going.
Nikesh Arora -- Chairman and Chief Executive Officer
I hope our Head of Europe is listening to this call. We intend to make no changes in Europe. He is strong and he is going to make sure he deliver this quarter and retain its growth rate in the upcoming quarters.
Operator
Okay We'll go next to Karl Keirstead with Deutsche Bank.
Karl Keirstead -- Deutsche Bank -- Analyst
Thank you. I've got two questions for for Kathy. Kathy if billings as Nikesh was just describing might be a less useful measure of the fundamental health of Palo Alto Networks, do you think that your backlog or RPO number might have more value and would you mind disclosing it, I think you disclosed in your last couple of Qs.
Kathy Bonanno -- Chief Financial Officer
Yes. It's not a massive number for us and it will be disclosed in our Q again this quarter. And you can do the math on the difference between deferred revenue and that number. The number that we provided on the earnings call is the current billings number, which grew nicely at 25% year-over-year and that's a metric that I think most analysts have been monitoring for a number of years and have been asking us about over the years and so I think that's continuing to focus on that number is important along with our revenue growth, obviously.
Karl Keirstead -- Deutsche Bank -- Analyst
Okay, great. And then just as a second question, Kathy, just on the adjusted free cash flow margin guidance of 36% for the full year, I think through the first nine months of this fiscal year that adjusted free cash flow margin would average out to be close to 39%. So to end up at 36% for the full year, you would need your fourth quarter free cash flow margin to dip quite a bit, maybe even to below 30% (ph) and I'm just wondering if you could touch on why that would be. Thanks.
Kathy Bonanno -- Chief Financial Officer
Yes. We did talk about the adjustment that we're making in the quarter. So the adjustments will be, you know, particular to the Q4 number. But additionally, we tend to have more expense in that quarter, more commissions expense in that quarter, and so we're comfortable with full-year guidance of 36%.
Operator
We'll go next to Rob Owens with KeyBanc Capital Markets.
Rob Owens -- KeyBanc Capital Markets -- Analyst
Great. And thanks for taking my question. If you look at the strength that you saw in product revenue yet again. Can you kind of paint what the landscape looks like? Q1 in general was a little weaker for most security vendors and you continue to put up impressive results on the product side. So just curious in terms of sales cycles, what the demand landscape looks like, and also what kind of levels you're seeing of discounting out there? Thanks.
Kathy Bonanno -- Chief Financial Officer
Yes. So we did see a really strong product growth number and we're obviously very thrilled with that. The new products that we have introduced over time remain very competitive in the market and our sales teams as we mentioned are doing a good job of selling those products. We're seeing some improvement as Nikesh said in terms of sales cycles for the cloud, products that we're selling, there seems to be a lot of demand for that and it doesn't take a lot of convincing, but overall, I wouldn't say that there has been significant change in terms of our sales cycle for selling the vast majority of the products that we sell.
Rob Owens -- KeyBanc Capital Markets -- Analyst
Great, thank you.
Operator
And we'll go next to Saket Kalia with the Barclays Capital.
Saket Kalia -- Barclays Capital -- Analyst
Great, thanks for taking my questions here. Kathy, maybe for you on the product revenue number, we touched on some customer examples of refresh, and I think, it's very clear that you are optimizing kind of the attach subscription, but can you just talk a little bit about the health of firewall refresh more broadly in the quarter and how you're sort of thinking about that trend going forward?
Kathy Bonanno -- Chief Financial Officer
Yes, well, when people talk about refresh, they tend to talk about it in two different ways. So I'll just talk about both. One is that just general market refresh and that is going on all of the time, right. That's how we get most of our new firewall customers, if somebody is refreshing their -- on a firewall refresh and they're replacing old firewalls with new firewalls and that's how we go in and take market share and continuing to land and expand, right. The other refresh that people talk about is our own internal refresh. So our own customers having sort of reached five to seven year life of their firewalls and they're replacing those firewalls. And that is a question that we get asked a lot about is that driving our growth in the quarter and certainly it contributes every quarter, but as we've said for a number of quarters, we think that -- that opportunity is more in front of us than behind us because the number of cohort -- the cohort sizes just get larger and larger over time and we have portion of refresh in our numbers in this quarter, a portion in last quarter, but it's not the primary driver of our growth, yet, we still are very focused on that opportunity, we think it's a great opportunity for us in the future. And we don't, we're very encouraged and are focused on getting that refresh opportunity both the general market, refresh opportunity as we continue to take share and our own internal refresh opportunity.
Saket Kalia -- Barclays Capital -- Analyst
Got it. Maybe for my follow-up for you Nikesh. I know in the beginning of the quarter in early February, there were some changes in the channel program, I think some sort of adjustments or different models for RedLock and different models for partners that sort of sell the broader portfolio. Can you just talk a little bit about how, if at all those sort of impacted in the quarter and what's been the feedback from the channel as you wrapped up this April quarter?
Nikesh Arora -- Chairman and Chief Executive Officer
Look, I think we evaluated various possibilities channel, which is where there was a bit of noise not this quarter, but prior quarter and where we landed is a happy place both the channel and for us. If you understand these cloud products, the SaaS products actually end up having to be sold -- not just through our current channels, but also through our future channel, which is basically the marketplaces of AWS, Azure and GCP, because when customers go deploy public cloud capabilities, they go to the marketplace of the public cloud providers to find other tools and accessories and products and we have to be present there, which requires a different model from a activation and deployment and sale perspective.
So we enable that, we made room for our channel to be able to refer customers to that marketplace as a result, they continue to get their economics in a referral way as opposed to the way they have been used to in the past, which is more hardware process and I think things are stable, things are happy. We're selling product, the chance of making money and customers are able to buy it whichever way they want to consume it.
Operator
And we'll go next to Phil Winslow with Wells Fargo.
Philip Winslow -- Wells Fargo Securities -- Analyst
Hey, guys thank for taking my question. Congrats on a strong start to the year, particularly on the product -- sorry Q3 particular on the product side. Just wanted to focus on Cortex. We spent a lot of time on product and Prisma but if you can give us an update on Cortex, particularly if you look at the Cortex hub, how you feel about the progression of their applications? And then also just a usage and call it hydration of the data lake?
Nikesh Arora -- Chairman and Chief Executive Officer
Well, as I mentioned like that right now there are two very clear parts of Cortex. One is the Cortex XDR combination which requires the data lake, which includes Traps as we -- last quarter we announced that we're going to make Traps an integral part of our XDR offering. We felt this, but it got validated this morning. Coincidently, we believe XDR is now the leading product in the market and then beats (ph) any EDR products hands down. So many of those, you know, have been displacing the traditional legacy vendors in the market and we believe we have not just a competitive product, but a better product and we're seeing that in the pipeline growth. We're seeing that in the deals that we've done. We've done about 50 deals for Cortex XDR in about six weeks since we announced it and deployed it in the market. We have a very healthy pipeline going into Q4. We are applying a speedboat concept to Cortex XDR just the way we did, the way we did to public cloud and Prisma. So we have lots of hopes from Cortex XDR and every Cortex XDR deal -- every deal to deploy Traps required Cortex data lake and the Cortex data lake is being deployed in those cases.
In addition to that Demisto is part of Cortex now because customers look at automation from a store perspective. Even though we only had Demisto in our numbers for only about a month this past quarter. It has surpassed any business plan they have prepare to their own end despite sheer fact that our core team is really excited about Demisto and every one of our customers got excited about Demisto and we expect that trend to continue going into Q4. So, generally on Cortex we're bullish both from a Cortex XDR data lake Cortex hub perspective as well as the Demisto perspective. Many of the Prisma integrated capabilities that we are launching this quarter actually use Cortex hub to create integrations between some of our products, whether it's VM, an Aperture or some of the integrated reporting.
Philip Winslow -- Wells Fargo Securities -- Analyst
Great, thanks guys.
Operator
And we will go next to Michael Turits with Raymond James.
Michael Turits -- Raymond James -- Analyst
Hey guys, good evening, obviously everything looks really strong from the top line revenue current billings products. But as we look into next year, what should we think of, first on the EBIT margin side since I would assume that we have a lot of dilution coming from these acquisitions? And then, what should we think of as the trajectory for cash flow margins declining before they begin to bottom?
Kathy Bonanno -- Chief Financial Officer
We'll provide guidance at that point, when we're ready to do so. We've provided guidance for the full year, which takes into account, the contract length issue that we discussed earlier. So we're not ready to provide long-term guidance on either one of those metrics, but on the operating margin, you can see this year. We've been operating within the framework. We improved margins despite the fact that -- well on an organic basis, which is where our framework has been about and so we're very focused on continuing to ensure that we're working toward bottomline profitability at the same time that we're focused on growing the top line and I wouldn't expect that to change.
Michael Turits -- Raymond James -- Analyst
And then Nikesh I wanted to ask about GlobalProtect cloud services and to be fairly specific about it, competition with Zscaler. How do you see that competition? And do you feel that with them potentially moving into certain firewall applications, it's necessary perhaps for you to do more in the proxy area in order to make sure you're competing on an even basis?
Nikesh Arora -- Chairman and Chief Executive Officer
I'm going to defer to this question to my Friend Lee. Eventhough, I'm sure I can push you the answer, but I'd rather let him do it.
Look, we've been very consistent when we talk about GlobalProtect cloud service which is now Prisma Access. We believe that fundamentally, you need to be able to secure all applications and the way to do that is with a next-gen firewall foundation in the service, which is something that clearly we have a unique and distinct advantage of -- is fundamental to how Prisma Access is architecture and how it works. As we mentioned in the launch announcement today with Prisma, there are a couple of key enhancements coming to Prisma Access. Number one is, we are going to be supporting GCP as a public cloud foundation in the near future that will extend Prisma Access out to 100 plus locations around the world. So from an pure network latency performance perspective, we believe we will be the best at the performance side of service. And second, we announced that we will soon have a cloud management service to go along with it such that for customers who want the entire service to be done through the cloud, we'll be able to support that from on-boarding to configuration management to monitoring.
Michael Turits -- Raymond James -- Analyst
Okay, thanks everybody.
Operator
And we'll go next to John DiFucci with Jefferies.
John DiFucci -- Jefferies -- Analyst
Thank you. My questions have largely been answered. I just have a sort of follow up for Kathy. Kathy, really appreciate your guidance to focus on current billings, which makes total sense to us and not to really worry about keyhole a lot. Just trying to get ahead of any differences we might see going ahead. It seems to be that we might see a little more volatility in current billings, because previously long-term deferred (ph) revenue would have sort of smoothly flowed into current billings every quarter whereas that might now be a little more lumpy upon annual renewals. And I don't want to get you queued (ph) about how this with, but the current billings should remain the same as they would have been. Maybe just a little more lumpy and sort of smoothes out over time as more sales are build annually. Does that all make sense?
Kathy Bonanno -- Chief Financial Officer
Yes. I think that that makes sense. The changes, the mix are happening gradually over time. We did see really great strength in our cloud products this quarter, which was a great thing for us obviously and so we're continuing to expect strength there and we've guided assuming that strength. But for the rest of it, I think you're absolutely right, that it's not going to be an overnight transition, it will happen gradually over time.
John DiFucci -- Jefferies -- Analyst
Great, OK. Thank you very much.
Kathy Bonanno -- Chief Financial Officer
Yes.
Operator
And we will go next to Fatima Boolani with UBS.
Fatima Boolani -- UBS -- Analyst
Good afternoon. Thank you for taking the question. Nikesh, I had a question for you regarding Prisma. It makes a ton of sense to amalgamate your four pillars on the cloud at security front, but given each solution within the Prisma portfolio has at different pricing models and potentially go-to-market models, I'm wondering if you can clarify Prisma purchase as sort of an all-or-nothing and to the extent it's sort of an all-deal, how are you going about pricing the offering given the diversity of revenue models within that portfolio? And then I have a follow-up for Kathy.
Nikesh Arora -- Chairman and Chief Executive Officer
Thanks for the question, Fatima. Look, you're right that the cloud journey has different aspects and there have been individual products that customers have gone and bought to enable different parts of the journey, whether it's the GPCS competitors when it goes toward remote branches and the offices or whether it's the public cloud scenario or whether it's your CASB scenario and part of our thesis is that you shouldn't have to have multiple products because there are interdependencies between these products which creates security exposure.
So while we haven't highlighted on the exact pricing because we're still -- we just announced the acquisition Twistlock and PureSec this morning, you can expect us to not distinguish in terms of how customers deploy their applications, whether it's private cloud, public cloud, container, serverless public cloud, because we think that there should be consistency and it should be purely based on the amount of volume you transfer to the cloud as opposed to the different ways you do it. So you should expect to see some cohesity in pricing. Having said that, given the realities of the market, we will still make our products available in their individual forms to compete directly with people in the market, because we believe our products are very competitive and better in all cases, but obviously, the integrated products that have a lot more benefits than just buying the individual piece parts.
Fatima Boolani -- UBS -- Analyst
Fair enough. And Kathy for you just two financial ones. We have an understanding of the OpEx impact from the recent acquisitions, but I'm wondering if you can speak to the totality of the revenue and billings contribution from recent acquisitions, as well as the above seasonal jump in the sales and marketing expense this quarter and that's it from me thank you.
Kathy Bonanno -- Chief Financial Officer
Yes. We do have, as I mentioned in the prepared remarks, increase in our expense associated with the acquisitions and our guidance for EPS and our guidance for revenue reflects both the top line and bottom line impacts of those, although we haven't called them amount explicitly. On the -- sorry, what was the second part of your question?
Fatima Boolani -- UBS -- Analyst
Higher than (multiple speakers) sales and marketing jump in the quarter, yes.
Kathy Bonanno -- Chief Financial Officer
Yes. You know, our sales and marketing teams, as Nikesh mentioned, I don't really think that it reflects any sort of big change in the business, but we have been hiring sales in Americas in particular to drive more coverage. And so it takes a while for those expenses to actually result in top line revenue in particular, right. So as we see those reps ramp and as we cover the math and get more -- get better Americas number up even higher hopefully, we'll see that change overtime again.
Fatima Boolani -- UBS -- Analyst
Great, thank you .
Kathy Bonanno -- Chief Financial Officer
Yes.
Operator
And our final question comes from Matt Hedberg with RBC Capital Markets.
Matthew Hedberg -- RBC capital markets -- Analyst
Hi, guys. Thanks for squeezing me in. One for Nikesh. Your firewall momentum and results remained strong clearly versus peers but as you continue to expand your cloud-based product portfolio, can you talk about some of the steps you're taking to over -- to avoid over rotating sort of the general sales notion from that core firewall base?
Nikesh Arora -- Chairman and Chief Executive Officer
Sorry, can you clarify what you mean by over rotating away or --
Matthew Hedberg -- RBC capital markets -- Analyst
Yes. I guess, you know, you've got a lot of exciting products on the cloud side, and I know there's a lot of overlay teams, but are there things that you can do to sort of maintain the momentum in core firewall despite sort of all the new shiny toys that I'm sure a lot of customers are probably (inaudible) for?
Nikesh Arora -- Chairman and Chief Executive Officer
Yes. Whilst we are not going to disclose, but we added a lot of quota-carrying reps in the last quarter purely for us to be able to drive more coverage and more -- cover more accounts in our core business. This is not for cloud, this is not for Prisma, this is not for Cortex. This is to drive more coverage across our existing core business. As I think -- I don't who said, Ken said or someone of you guys said that, you have seen us show strong product growth across every quarter, 28% product growth this quarter. So clearly we're not taking our eye off the ball. We understand what pays the bills. We understand where the money comes from. And we are seeing traction out of the market. It's not like people are not buying firewalls. The rumors of the firewall is being dead are overstated. So we think that is still continue -- it is still continuing strong trends on the firewall. We continue to hire reps. We continue to try and penetrate more accounts from a firewall perspective. We also are working as you know to add more capability in our firewall. So the average price per firewall goes up for us from a customer because they can do more things with the firewall, not just less. So we understand that to maintain the growth rates we have in the industry, it is not going to happen just by adding more products and growing them rapidly, it requires us to maintain a solid growth rate in our core business and we are focused on that.
Matthew Hedberg -- RBC capital markets -- Analyst
That's super helpful. And then maybe just one last one on XDR in particular. 50 deals in the quarter is great. Can you talk about where those deals are coming from? I assume a lot of them are maybe some of the legacy players, but are you able to -- also able to take share from some of the next-gen EDR vendors?
Nikesh Arora -- Chairman and Chief Executive Officer
Look, what's happening is that customers understand -- the one good thing what has happened is that the EDR vendors have paved the way in the minds of the customers that endpoints need an evolution and the evolution needs to come in the form of not just endpoint protection, but being able to do behavior analytics, non-signature based capability at the endpoint itself, in being able to process tough in the cloud, in being able to triage alerts between endpoints and network. So this is all about reducing the signal to noise ratio that comes out into your sock (ph) and XDR takes one level up and says, if you are brought into the vision of reducing the signal to noise ratio from an endpoint perspective, guess what, the next evolution has to be being able to triage across your firewall (inaudible) the EDR vendors are paving the way for us, in terms of opening the door and saying, hey, please come on in Palo Alto Networks, tell them divide the virtues of not just EDR, but also, how EDR networks work together. We have thousands of Traps customers, they are natural candidates for us to go to and say look, you're only Traps customers, you're only firewall customers, you should be deploying XDR capability, which will make the life your software easier. I think fee announced -- we integrated our Cortex XDR, APIs into Demisto very well this quarter. So even that is happening. So we are beginning to integrate more and more. So yes, we are -- the door is opening for us vis-a-vis existing EDR vendors and you can expect us to put more acceleration and more focus in trying to compete with them in hand-to-hand combat.
Operator
At this time, I would like to hand the call back over to Nikesh Arora any additional or closing comments.
Nikesh Arora -- Chairman and Chief Executive Officer
Well, all I want to do is say thank you very much for your time this afternoon. As a reminder, we will be hosting over 4,000 customers and partners next week at Ignite, this year in Austin, Texas. I look forward to meeting more of you in the months ahead. I also want to give a shout out to all of our employees who worked really hard this quarter and say thank you for all your hard work and let's keep going. We have Q4 to do. Thanks everyone.
Operator
That does conclude today's conference. We thank you for your participation.
Duration: 62 minutes
Call participants:
David Niederman -- Vice President, Investor Relations
Nikesh Arora -- Chairman and Chief Executive Officer
Kathy Bonanno -- Chief Financial Officer
Keith Wise -- Morgan Stanley -- Analyst
Gur Talpaz -- Stifel Nicolaus & Co -- Analyst
Walter Pritchard -- Citigroup, Inc. -- Analyst
Sterling Auty -- JPMorgan -- Analyst
Kenneth Talanian -- Evercore ISI -- Analyst
Andrew Nowinski -- Piper Jaffray -- Analyst
Karl Keirstead -- Deutsche Bank -- Analyst
Rob Owens -- KeyBanc Capital Markets -- Analyst
Saket Kalia -- Barclays Capital -- Analyst
Philip Winslow -- Wells Fargo Securities -- Analyst
Michael Turits -- Raymond James -- Analyst
John DiFucci -- Jefferies -- Analyst
Fatima Boolani -- UBS -- Analyst
Matthew Hedberg -- RBC capital markets -- Analyst
