Check Point Software Technologies Ltd. (0Y9S.L) Q1 2019 Earnings Call Transcript
Published at 2019-04-18 17:00:00
Greetings, and welcome to the Check Point Software First Quarter 2019 Conference Call. At this time, all participants are in a listen-only mode. A question-and-answer session will follow the formal presentation. [Operator Instructions] As a reminder, this conference is being recorded. It is now my pleasure to introduce your host, Kip Meintzer, Head of Global Investor Relations for Check Point Software. Please go ahead, sir.
Thank you. I'd like to thank all of you for joining us today to discuss Check Point's first quarter 2019 financial results. Joining me today on the call are Gil Shwed, Founder and CEO, along with our CFO and COO, Tal Payne. As a reminder, this call is webcast live on our website and is recorded for replay. To access the live webcast and replay information, please visit the Company's website at checkpoint.com. For your convenience, the conference call replay will be available through April 26. If you'd like to reach us after the call, please contact Investor Relations by email at kip@checkpoint.com. Before we begin with management's presentation, I'd like to highlight the following. During the course of the presentation, Check Point representatives may make certain forward-looking statements. These forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities and Exchange Act of 1934 include, but are not limited to, statements related to Check Point's expectations regarding business, financial performance and customers; the introduction of new products, programs and the success of those products and programs; the environment for security threats and trends in the market; our strategy and focus areas, demand for our solutions, our business and financial outlook, including our guidance for Q2 2019. Because these statements pertain to future events, they are subject to various risks and uncertainties, actual results could differ materially from Check Point's current expectations and beliefs. Factors that could cause or contribute to such differences are contained in Check Point's earnings release issued on April 18, 2019, which is available on our website; and other factors and risks, included in those discussed in Check Point's Annual Report on Form 20-F for the year ending December 31, 2017, which is on file with the Securities and Exchange Commission. Check Point assumes no obligation to update information concerning its expectations or beliefs except as required by law. In our press release, which has been posted on our website, we present GAAP and non-GAAP results, along with a reconciliation of such results as well as the reasons for our representation of the non-GAAP information. Now, I would like to turn the call over to Tal Payne for a review of the financial results.
Thank you, Kip. Good morning and good afternoon to everyone joining us on the call today. I’m pleased to begin the review of the first quarter. Revenues for the quarter increased by 4% year-over-year to $472 million and our non-GAAP EPS grew by 2% to $1.32, both slightly above the mid of our guidance. Before I proceed further into the numbers, let me remind you that our GAAP financial results include stock-based compensation charges, amortization of acquired intangible assets and acquisition related expenses as well as the related tax effects. Keep in mind that as applicable, non-GAAP information is presented, excluding these items. Now, let's take a look at the financial highlights for the quarter. Product and security subscription revenues were $257 million. Our subscription revenues continued to be strong, with 13% growth year-over-year, reaching $144 million. Our software update and maintenance revenues increased to $215 million, representing 4% growth year-over-year. The growth in our subscription revenues is driven by our advanced solutions mainly Cloud, SandBlast Zero day threat prevention and Mobile. Infinity consolidated solution also started to flow into the revenues and show nice trends. During the quarter, we had Infinity deals in variety of industries including: finance, manufacturing, software and defense with a significant portion coming from new customers. We continue to see an increase in customers annual run rate in Infinity deal ranging from 10 to 100s of percentage increase which is a great result. From an accounting perspective, a small portion of the deals is recognized as product revenues, while majority of the deals is recognized as recurring revenues over the life of the context. Majority as subscription and the remainder as support, update and maintenance. Deferred revenues, as of March 31, 2019, reached $1.312 billion, a growth of $146 million or 13% over March 31, 2018. Revenue distribution by geography for the quarter was as follows: 45% of revenues came from Americas, 44% of revenues came from Europe, Middle East and Africa region and the remaining 11% came from Asia Pacific. Please note, since the beginning of 2019, Middle East and Africa are part of Europe region, while before it was part of Asia Pacific region. The revenue distribution by geography for Q1 last year after the reclassification would have been 47% of revenues from Americas, no change, 42% of revenues came from Europe, Middle East and Africa regions after the reclass and the remaining 11% came from Asia Pacific. Those were the numbers for Q1 last year after the reclass. From a deal size perspective, this quarter, we had 47 customers with transactions of $1 million compared to 44 in Q1 2018. Transactions greater than $50,000 was 71% of total order value similar to last year. Non-GAAP operating margin for the quarter were 50% as we planned. We continue to invest in our sales force and marketing in order to execute our strategy, which revolves around prevention, management and consolidation of security. In addition, this quarter includes the full effect of our recent acquisitions both of Dome9 and ForceNock. Our financial income for the quarter reached $90 million. The increase is in line with a higher interest rate levels in the U.S. Financial income expected to be around $20 million, $21 million a quarter in the remainder of the year. Effective non-GAAP tax rate for this quarter was 19% as planned again. Please note, in the fourth quarter we expected the tax rate to be around zero as the lapse of statute limitation expected to occur by year-end. GAAP net income for the first quarter of 2019 was $180 million or $1.15 per diluted share. Non-GAAP net income was $205 million or $1.32 per diluted share, an increase of 2% from the first quarter of 2018 and $0.01 above the midpoint of our guidance. Our cash balance as of March 31 were $4.2 billion compared to $4 billion in December 31, 2018. Operating cash flow was $379 million, which includes part of ForceNock acquisition payment of $2 million. Collections continued to be very strong. During Q1 last year, we had $45 million tax refund. Excluding this item, our operating cash flow increased by 2%. During the quarter, we purchased 2.7 million shares for $305 million at an average price of $115 a share. This quarter we implemented a new accounting standard ASC 842 which changed the recording of long-term operating listed in the financials. Accordingly, we recorded assets of $30 million against liabilities reflecting the value of these leases. There is no significant impact on the income statement. Now, let's turn the call over to Gil for his comments.
Thank you, Tal, and hello to everyone joining us today. I would like to begin today with a review of the highlight of what we witnessed during the first quarter and provide a little more color on our business beyond the numbers that Tal just shared. Our first quarter was a big quarter in terms of events. We hosted our global Check Point Experience 360 Conferences for employees, partners and customers around the world. This year CPX 360 Conferences set a new record for the number of participants and generated highlight level of audience interest and enthusiasm. We had 30% more customers and almost 30% more partners attending the conference. During CPX, we focused on our Gen 5 and upcoming Gen 6 security architecture. As we’ve highlighted before, the vast majority of enterprises have security to address third generation cyber attacks, which means that they’re almost 10 years behind the current rates, and only 3% believe that they’re protected against 5th generation attack, which we are facing every day. This thus brings to light how vulnerable the world infrastructure is today and the potential for catastrophic damage, if enterprises don’t take measures to protect themselves against the current generation of attacks. During the last number of years we’ve seen an almost 3x increase in the number of vulnerabilities discovered in the world technology infrastructure. Operating systems, hardware, software, servers, critical infrastructure etcetera. Last year, there were over 16,000 reported vulnerabilities with 800 in mobile operating systems and all. The 5th generation of attacks are usually multi vector attack. It can be an app that you download on your mobile that steals your cloud credential and from where gets into your internal data of the company. It can be a file that arrive through email and creates a chain of attacks like that. Dynamic payloads are used in most attack tools today and can potentially turn every computer into an asset in a global cyber warfare. The escalation in Gen 5 attacks means that we’ve a huge challenge ahead of us and an even larger opportunity. While a big part of our marketplace still relies on the refresh of Gen 2 and Gen 3 customer environment, the real challenge and opportunity is in upgrading these customers to Gen 5 cyber protection and consolidating their security infrastructure. During our CPX Conferences, we’ve also revealed more details on the 6th generation of our cyber security solution. One that we believe will revolutionize how security systems work. We believe it will evolve how people think about security architecture by changing the way they are constructed. Today security architectures rely on monolithic systems that includes the delivery and the security technology in one big piece of software or hardware. These consume a lot of resources and are slow to adapt to the evolving trends. We intend to separate the security service and delivery by turning it into a cloud-based architecture that enable nano agent to bring the latest security innovation to every cloud app or IoT device, and of course to all the other elements of our network. These nano security agents combined with a smart cloud security brain will be the essential business of our Gen 6 security architecture. During the first quarter, we introduced a number of new technologies beginning with the new 6000 appliance series with improved price performance and optimize for Gen 5 advanced threat prevention. We also delivered Maestro, a revolutionary security solution for scalable network that delivers performance that couldn’t be achieved before at the fraction of the grid [ph] cost. Maestro achieved these results by changing -- by chaining multiple security appliances together to deliver an almost linear improvement in performance. This hyper skill technology provides cloud greater resiliency and elasticity. Unlike other solutions that are only targeting the super high-end of the market, Maestro can start at the medium business budget and scale all the way up to the performance needed by the largest networks in the world. Therefore, it opens a much broader marketplace with previous super high-end solution and enable cloud grade elasticity across the market place. During the quarter, Check Point CloudGuard Dome9 received the Security Innovation of the Year award at the latest Cloud Awards. The recognition was for its comprehensive software platform for public cloud security and compliance orchestration. In addition, Check Point SandBlast Agent earned NSS Labs recommending rating in 2019 Advanced Endpoint Protection Test. SandBlast Agent detected a 100% of HTTP and email threat and a 100% of malware using sophisticated evasion technique while providing zero false positive. You may have also noticed the recent Homeland Security announcement regarding remote access vulnerability in almost all of our competitors product. As we have spoken about in the past, our biggest differentiator is the level of security we provide to our customers and our focus on prevention and protection. Needless to say that, Check Point product was highlighted as a product that is secured and doesn’t suffer from any of those vulnerabilities. On the sales front, we’ve been putting a lot of emphasis on winning new customers. Consolidating the security infrastructure, with a focus on cloud security and our Gen 5 Infinity Total Solution. Infinity deals also generated nice results this quarter with new customers ranging from a few hundred users to over ten thousand users and from the construction industry to high-tech company. We have seen some good signs of success in increasing new customer wins, especially in Europe. Once we are able to achieve a similar type of uplift in the U.S new customer wins, I believe we will see an acceleration in our growth rate. In the U.S., we continue to make favorable improvements to our sales force. We brought senior leadership to our channel organization. We launched Check Point Engage, a new global channel program focused on Gen sales activities between our partners and our people. The program feature Check Point, a reward program that measures sales activities at the individual level and rewards them points for their Check Point sales activities. The program will be rolled out gradually starting this month and we intend to utilize the program as the basis for our partner business model next year. Overall, looking at our global sales structure, we’ve seen areas with great improvements and we’ve seen areas where improvement still needs to be realized. I believe that the opportunity ahead of us is much bigger than what we have seen before, while I am happy with the progress we are making in some areas, our growth rate should be higher than what we have seen. This is a good time to address our projections for the second quarter. You know my regular caveat, projecting future results is very challenging. There is always a high level of uncertainty. Results can be better or worse than our projection. With that in mind, for the second quarter, revenues are expected $474 million to $500 million, and non-GAAP EPS in the range of $1.32 to $1.40. GAAP EPS is expected to be approximately $0.17 lower than that. Thank you for your time and I would like to open the call for your questions.
Thank you. [Operator Instructions] Our first question today is coming from Michael Turits from Raymond James. Your line is now live.
Hey, guys. Good afternoon. One for Gil, one for Tal. Gil, you mentioned Gen 6 as cloud delivered security. Does that mean that you're going to try to approach things from in terms of cloud delivered securities -- security from the cloud similar to what some of your competitors that are doing secured web gateway from the cloud are doing, is that a direct competition?
I think we will have some of these components, but the answer is no. The short answer is no. I think our architecture will be a little bit different. I don’t believe in routing all your traffic to the cloud which slow down things. Companies don't want to do it for their internal traffic and it's not going to work in fully scalable to bring security everywhere. What our architecture is based on is having this global threat cloud and that queries can be made to understand if any transaction, a new connection, an up transaction or anything basically that we want to test is something that should work or shouldn’t work. It does a lot of effects. I mean from the standpoint we can apply all security technologies to every query like that. And it brings a lot of control back to the security professional as opposed to the people who are in charge of the -- or no, the people as opposed to the manufacturers of the equipment or the developers of application software. But it will have very positive effect on the overall performance on the fact that they doesn't have to leave the enterprise. Data will remain in its point and that’s the whole concept of what we call the nano agents.
Okay. Thanks, Gil. And Tal, [indiscernible] that your product is being impacted by the shift to subscription and to Infinity, but you have been moderating declines in product revenue those worsen this quarter, got steeper again. Should we expect that you could go to either flat or positive product this growth in one of the quarters this year?
I am not projecting right now. We gave the guidance for the full-year and you don't split between the line. The total guidance are taking that into account. If there will be a more than expected quicker shift into Infinity, while the great news is it can affect bigger on the product. But in general, in the product, I don't expect it at that short-term to become on a positive note, I expect the subscription to continue and grow.
Okay. Thanks, Tal. Thanks, Gil.
Thank you. The next question is coming from Brad Zelnick from Credit Suisse. Your line is now live.
Great. Thank you so much. I've got one for Gil, and one for Tal as well. Gil, it sounds like there is a lot of exciting things happening in terms of new products and we are hearing more optimism from the channel. And as you said in your comments, there is still improvement to come as you are making changes especially here at in the Americas. So what indicators are you looking at that gives you the confidence to continue investing and how long do you think it will take for Check Point to return to market growth rates?
I think the indicators that I'm looking at mainly are at the level of activity. How many new customers are we meeting, how many C level people are we meeting. Of course, we look at other measures like the pipeline and things like that, but for me the most important one is our own execution. How many of these activities are we making and by the way how many are the partners -- our channel partners are making and by the way that's why we designed the new channel program, the Engage program to work on that instead of measuring the results after the fact measuring every week and everyday how many of these activity is marketing, sales and so on are we conducting. My belief from everything I know that we have more capacity, we can do more and we can generate much more results that way.
Great. Thank you. And Tal, I know Gil gave us the ability guidance on Q2. But we didn't hear any update as it relates to the full-year. Is it fair to assume that your full-year guidance that you gave us last quarter still stands?
Yes, definitely. The full-year guidance stand. It's -- I gave you a bit more color this quarter just to make sure that you see which lines its coming from. You can see our sales and marketing are higher than some of your models, while the financial income is higher, so you can balance between the two. But the results -- the annual result is expected to be the same.
Excellent. Thank you so much.
Thanks. Our next question is coming from Shaul Eyal from Oppenheimer. Your line is now live.
Hi. Good afternoon, guys. Actually I want to start with a question that hasn't been asked in sometime now regarding the competitive arena. Gil, do you believe that Check Point is actually regaining market share?
I think it depends how you look at it. I think overall our growth number should be higher and we are aiming at that. I think with Infinity we are actually capturing new land. We are getting to new spaces and we are taking full architectures with new customers. The number of new customers right now is still small, but it is growing nicely and the first quarter was a great indicator of that. The dollar volumes on that can be significant and we are seeing a mix of customers, some are small and small here is hundreds of thousands of dollars, which is kind of large in our [indiscernible] and some are multimillion dollar contracts which are a good [indiscernible] and the main value for that we actually give these customers the full security to combat the cyber security challenges they have got. And believe me this is needed.
Understood. And maybe one for Tal. So good work on deals greater than $1 million. My question is where there any Dome9 and Infinity related transactions part of this? I think you had 44 or 47 this quarter, if I'm not mistaken.
We are at 47. We are saying, no, but some of Infinity deals are part of those deals and in it you have also the cloud solutions, of course.
So the answer is yes on Infinity and Infinity includes also Dome9. Are they standalone Dome9 in that category, I’m not sure.
Got it. Okay. Thank you so much.
Thank you. Our next question is coming from Phil Winslow from Wells Fargo. Your line is now live.
Hey, guys. Thanks for taking my question. I just have one on the pricing front. Just curious what you are seeing in -- just in pricing environment out there you had started the year. And then also you’re focusing and obviously specifically on Infinity too. Any sort of color there? Obviously, the pricing impacting there is very different, but any sort of color and feedback you’re getting from customers on Infinity and it got a market price, it would be great. Thanks.
Yes, I can talk a bit about the Infinity deals that we sell. So like we spoke before, following each one to see the trends there and I continue to see what we talked about in the previous quarter. We see deals like Gil said from a customers that have 100 end users to customers that have more than 10,000 users which is very nice to see that its fitting small companies and very large companies. We see in terms of the -- the customers -- a significant portion is new customers, which is actually something which is nice to see this quarter it was even more than the previous quarter. So we see it helping us more and more with new customers penetration. Again, small number, but a nice phenomenon which hopefully will be a consistent trend. And we do see that the run rate are increasing significantly. So is it the customer that maybe had only firewall before they want to buy Infinity, the increase in the run rate can be 100s of percentage. And if the customer that already had NGTX and maybe cloud, then the increase is only 10s of percentage. But still increase in the run rate, increasing the satisfaction, which is very nice to see. So that's the color. Revenue is very, very slow. Revenue recognition actually, remember the deals that we see on average probably three years deal. You don't see it in the balance sheet. Most of them you don't even see in the deferred revenues, because its annually invoiced. So it's a backlog that you don't see as part of the deferred revenue and you see it in the revenues the subscription and the support over the life of the contract majority of it is subscription unlike a typical regular customer that doesn't buy Infinity, that's where we will see a strong shift over there over time. And small portion go into the product and the product is recognized only once the customer is actually pulling the product.
Got it. Great. Thanks. And then also just a follow-up for Gil on Dome9, you gave some commentary earlier on that. Now that you have bought -- own that for a couple of quarters there now, what's the feedback then from customers and prospects and how do you think about Dome9 competitively out there?
I think the feedback is actually very positive. We are seeing nice activity in the field. It's in the very early stages because the field now needs to learn the whole new Dome9. We’ve made a drastic shift in the go-to-market from a small sales force of a handful of people to a large sales force with hundreds of people that basically starts from zero and need to learn the whole concept. But when I'm looking at again the activities in the field what I sampled, I saw a lot of activity around Dome9. In CPX, we got a lot of positive feedback to Dome9. So I think it will take us a sometime to ramp up, but the feedback so far is terrific.
Thank you. Our next question is coming from Fatima Boolani from UBS. Your line is now live.
Good morning. Thank you for taking my questions. I have one for Gil and one for Tal. Gil, maybe a bigger picture question for you just with regards to the overall demand environment for parameter based controls and parameter based security. I think year in, year out we continue to hear sort of mixed messages on where customers are actually focusing their cyber security energies and dollars as it relates to product investment. So I wanted to get your take on how the customers view on network security and parameter based security like firewall solution is evolving. And then I have a follow-up for Tal.
I think we are seeing is a good level of demand. I think -- I mean, I think people are still refreshing their infrastructure. Some companies are still building new data centers. So I think the challenge is not there, I mean the demand is healthy. I think the challenge is how do we elevate the level of security and not how we compete on things that are relevant for 10 years ago. It is a competitive marketplace and that is a challenge, but I think overall there is a healthy demand I don't see that the challenge is there right now.
Fair enough. And Tal, maybe for you, just a quick housekeeping. On the reclassification of the geographic revenue, was there any organizational change that prompted you to do that or it was just sort of a mechanical thing? And then, more specific question on your subscription and maintenance revenues. They did decline sequentially, so I did want to understand some of the drivers that would have those subscription and recurring revenue line items down sequentially and that's it for me. Thank you.
Okay. I am not sure I understood the second part, but let's first take the first one. So, structurally we changed. Our free And Middle East is reporting to Europe now, it's now called EMEA. So expect -- if you remember 10 years ago, that’s exactly how it was. We moved it back to EMEA, so now it's called EMEA. And we move those percentage, obviously, it's a smaller region, but it move to report into the Europe, Middle East and Africa structure versus APAC -- Asia Pacific. So as we change it structurally there, we also reclass the revenues and the P&L of course.
And I think, it's just -- its internal managerial issue. And mainly if you look at the geography, especially we are in Israel and we are part of the Middle East. Geographically we are in Asia, but in terms of proximity, we are much closer in the distance we are one third of the distance to Europe than we are to the headquarters in Asia. So it's -- so, I mean, there's always these two balances.
That make sense. And just to clarify the second question around the sequential decline in blade subscription and maintenance and support revenue in the quarter. This wanted to understand some of the dynamics that would have those recurring revenue line items down sequentially whether you can shed light on renewal rates or blade subscription package renewal rates and any dynamics there. Thank you so much.
Actually not relating to renewal rate, its relating to the fact that in the -- even in the subscription line, accounting wise you have some blades that are recognized like products. The revenue recognition is like product. Just one portion, but in Q4 you can see a tick up when there's more -- like you have more product revenues, you have more of those type of blades and then you can have an uptick in Q4 and then it's going back to regular rates in Q1. So that’s the generic -- or it has nothing to do with the renewals. Renewals are pretty much consistent, even slight increase there in some quarters. So in general, it's just some subscription that are recognized immediately.
Thank you. Our next question is coming from Ken Talanian from Evercore ISI. Your line is now live.
Hi. Thanks for taking the question. You mentioned putting more emphasis on acquiring new customers. I was wondering if you could expand on the changes you are making to the sales incentives for both direct sales and the channel and how they compare to the prior model?
I think it's mainly about activity management. Its making sure that people go out and do these kinds of meeting, it's the weekly measurement, it's weekly focus on kind of these things. But, of course, some bonuses and some MBOs and so on in terms of getting to this activities, but the key is around -- but the key is about being trained and actually going out and doing those meetings.
Okay, great. That’s helpful. And also, I was wondering if you could give us a sense for how the pipeline is building around the Maestro products and the 6000 Series of appliances?
I think it's building up quite well. I mean, we have seen in Maestro a nice number of deals already in the first quarter, even voluntary revolutionary concept. And I think I don't know if he we have a specific pipeline for the 6000 Series because it's in-line with the general core business that we do, but we are seeing that they get more and more into the marketplace. People are enthusiastic about that. They need to place them correctly in terms of the price performance and so on, and I think it's working okay.
And I will just add that, we don't reveal the numbers, obviously, but you see a nice transition, it's been launched only two months ago like in end of January and beginning of February. And it's already, let's say, more than 10%, more than 20% transition. So it's quite well.
Thank you. Our next question today is coming from Andrew Nowinski from Piper Jaffray. Your line is now live.
Great. Thank you very much. Just two questions. First, why do you think your growth in Europe continues to outperform the Americas?
I think it's execution, management and focus on the right thing. I think it's also better alignment with the channel partner, but I think it works well in Europe. And I think we continue to focus on executing on both areas, because I think we have far more potential in both places.
Okay, very good. And then with regard to billings, it was up about 3.4% off arguably an easier comp from last year, which looks like it may have been a bit below the market growth rate. And I know you launched a number of new appliances over the last two quarters including the 6500 and 6800. So I'm wondering is that lower growth rate, maybe simply due to the Infinity sales model or is there another reason why your new appliances are not driving -- translating to better growth in billings? Thanks.
So I think you will relate it to that, I mean we don't talk about the billing, but you’re right. When you calculate the implied booking, you are around 4%. Remember, some of the deals that are off balance sheet, but in general, we said that Europe did well and Americas still needs to improve.
Thank you. Our next question is coming from Gregg Moskowitz from Mizuho. Your line is now live.
Okay. Thank you. The first question is just on Infinity. So for the customers where you're seeing a big uplift, in other words, a 100% uplift or more. Are those customers actually displacing third-party technologies or is there deployment additive to what they previously had?
I think both. I think they're displacing and they are also using technology that we didn’t have before, which is most of the Gen 5 capabilities. And by the way, remember, we have said that this quarter we have actually had a very nice contribution to Infinity from brand-new customers in which case they basically displace their entire security infrastructure with the Check Point Solution, which is great to see.
Okay. Thanks, Gil. And then a few months ago you brought on a new Channel Head and you did touch on some channel changes a little bit in your prepared remarks, but what changes should we expect to see over the course of 2019?
I think the main change -- there was actually two changes. One is the day-to-day way we work with partners and the other is the programs that needs to support that. So in terms of the program I spoke about, the Check Point's Engage partnering program, again it is designed to work on the activity level. Partners actually collect points for every activities that they do, meeting, conference and so on and they can see every time in their activity how they are scoring on their activity level and what level of attainment they have got to. And this is driven, I think which is kind of a way to encourage to, to gamify and to support the day to day activity in the field which is designed around the exact same thing. If we go out together, if we teach together, if we go to customers, I believe that we will win a lot more.
Okay. That's helpful. Thank you.
Thank you. Our next question is coming from Shebly Seyrafi from FBN Securities. Your line is now live.
Yes, thank you very much. So I want to talk about the gross margin which declined year-over-year by .4 percentage points year-over-year. It looks like the product side declined more. Is that correlated with the hiring of Frank Rauch as the new channel head? What we are hearing from our channel checks that Israel is allowing North America with Frank leading it in the channel to make more pricing decisions on its own. I'm wondering if that's leading to more price aggression and therefore a decline in the product gross margin?
Really, I think if you look at the numbers, the total gross margin has actually moved up. I think it's more relating to the mix. You are right, that there is in general price pressures for the last few years there is a price pressure, I think it's a mix of the product, sometimes can shift it a few -- a few, not even percent, less than a percent, just 1% up, 1% down. It's nothing material changing in U.S versus the other regions and the same with the policies. I mean they can compete in effective way anywhere on the globe.
And I mean, I’m glad that we hear feedback that people feel better about the changes and the authority that people have, we are definitely trying to make that happen and to support the people in the field and make it easier for them. The success of us will be determined not by the way we manage the gross margin at the end, but the way we manage the top line. So I am -- so I mean, that should be our focus and that is our focus.
Okay. And you also stated that you are not happy with growth and I think you elaborated with Americas growth, in particular. What do you think is -- are the key factors driving that disappointment? Is it increased competition from Palo Alto and Fortinet? What are the other factors?
I think the main factor is our own execution is what we do in the go-to-market, the level of activities that we do, whether we address the right targets. I think we have an amazing set of people in the field. I think we have a very good set of customers, but I think in many cases for example, we are working with the same people on the same project, but what we need to do is to aim higher at the C level and sign new projects and that's true for existing customers and of course the most important element for me is going to new customers. Again, it's not easy to change the sales person behavior on that, because we're the existing customer, we also find the place with the higher win rate because it's an existing customer. We have a bigger project, again because they already have a large install base. So to get into this more challenging market of the Greenfield of new customers, it's always more challenging. But again, as I said, I think we're adding the capacity. I think our people do have the capacity and it's a matter of training, it's a matter of focus, it's a matter of activities, marketing and so on and I think we're -- we’ve made all the investment. We’ve more people and we’ve done more marketing and we are doing far more of all of that. So it's a matter of taking the time to see all of that happening, and by the way daily execution challenges with our people are dealing with, and I think they’re dealing with, it's very well. The last sampling that I did show that there are real changes happening now. As I said, in Europe, they already produce some good results in the first quarter, so that's very encouraging. In the U.S what I have seen so far is that there are changes in the behavior and the activities and the result still needs to come.
Okay. Lastly for me, ForceNock, what is the expected revenue contribution this year?
None, really. It's more technology that we acquired as part of our Gen 6 future products.
Thank you. Our next question is coming from Walter Pritchard from Citi. Your line is now live.
Thanks. Just wanted to kind of trace back the narrative we’ve heard here in the last, say, 3 or 4 quarters. And it felt like first half of last year was a little bit challenging and then Q3 you sort of hit the inflection. You talked about bookings improving and Q4 was really strong, coming through on the P&L, it feels like this quarter took a little bit of a step back with the results being back in the midpoint of the guide. Was there -- I’m curious of the resort of like deal slippage or anything that was kind of seasonal factors that you might just expect in Q1 or is it truly just sort of execution, some of the things you talked about that just need to ramp up in the Americas?
I think first Q1 is always a seasonal weak quarter. People try to finish the year with the biggest project through flushing the budget. Customers have new budget. Our people are basically starting from a very low level of pipeline. During the year, we build a pipeline and again it reaches the top in Q4 and again reaches the bottom or the beginning of the pipeline in Q1. Also, remember, that we’ve all the marketing activities that we’ve talked about the Check Point Experience Conferences and so on. People are not at the office all the time. People are building their plans for the year, so Q1 is always the quarter that’s challenging. With that in mind, by the way, I think that we’ve done quite well in the first quarter. I think as the year goes, we are building more and more into that. And again, my expectation is that there's a lot of upside. Whether it will come Q2, Q3, Q4, or 2020, I think time will tell us. I think right now we have a balanced expectation from our sales and I think there is a lot that we need to do that we need to -- that we can and we should improve, but again I’m not sure when it will come.
Great. And then Tal, just a quick clarification. I didn’t quite catch what you said on tax rate. For Q4, Q4 the GAAP tax rate was really low in '18 -- you said here is zero and vote this year?
Yes, just reminded you of what we said in the annual that I said expect around 19% in Q1, Q2, Q3. And in Q4 zero and I just reiterated that that was the guidance.
Thank you. Our next question is coming from Karl Keirstead from Deutsche Bank. Your line is now live.
Thanks. Just back to the go-to-market I had to more specific questions. In terms of accelerating the new logo acquisition in the U.S., is there a plan to meaningfully accelerate sales rep, hiring through year-end, the fact that you’re reaffirming I think the 50% operating margin guide for the full-year suggests not, but I just want to ask. And then secondly, as part of the channel changes, are you thinking about altering the economics or margins to the channel partners. Thank you.
In terms of the hiring we feel have the plan to grow hiring in the field, but again right now the focus is not on more people, but deferred activity and the activities of the existing people. I think that’s there we will -- especially this year that’s where we will see the results and investors, we will see the most of the investments. In terms of the channel partner economics, I think we want to align it with the new program. I think we want to make attractive partners that especially to partners that invest in our active around promoting our solution. And I think that’s what we want to align it, not based on partner side, that’s based on the actual investment and the activity with the partner is doing with us.
Okay. Thank you very much.
Thank you. Our next question is coming from Dan Ives from Wedbush Securities. Your line is now live.
Yes, thanks. Most of my question is obviously now that we 1Q. In terms of budgets --- well, the pie you’re going after in terms of cyber security especially within the U.S.. is its yield, you’re incrementally bigger than we saw a year-ago just given cloud and some of the secular shifts. Maybe you could just talk about that in terms of what the overall pie that you’re going after this year versus maybe years past?
I think customers do have a lot of focus on the cloud. On the other hand on cloud we don’t always figure out exactly what we want to spend on security on other things. It's a new field and many customers by the way are not -- don’t have any run rate or don’t have any specific plans for what the spend on security should be in the cloud. But again, since we are starting from a small base, that shouldn’t be the major factor for us at this point. I think, overall, what the message which we're giving to customers is you need to look at security at the top level, you need to consolidate and this way you can achieve a much better ROI on your investment and mainly much better security to your enterprise. And I think, for example, when you look at the Infinity program, we give the customers the full flexibility, we give customers the full capability to implement security on-premise, on the cloud, for end users, for mobile, all of that is included, so the customer doesn’t have to worry wherever it should be more on-prem or cloud or all the other factors that exist. It comes all included because I think that’s what customer needs.
Thank you. Our next question is coming from John DiFucci from Jefferies. Your line is now live.
Thank you. Just like to go back for a quick question on sales and marketing. You talked about it increasing, Tal, and it did. And Gil's talked about focusing on winning new customers. I'm just curious because your new business metrics or at least the way we calculate them actually moderated this quarter. It's still better than it was probably in the last two quarters, but sort of fell off a little bit from the last two quarters. I’m just curious is there -- because of the increased expense, do you have more unproductive sales people at this point right now or is it just the marketing spend you just talked about relative to the new business signings in this quarter?
So I think the way I view it is, we invested basically before the growth. So we invest now and we hope and expect and plan to see the growth coming later on. Now we have two growth drivers when we look at the increase in our sales and marketing, which is where the main growth is. One is the headcount. We increased the headcount. We talked about it and you mentioned it. If the majority of the growth is actually already from Q4. It's just you see the full effect in Q1. That’s one effect. We continue, of course, to increase the headcount, but not in the rate that we feel last year, that’s one. Second, we invest a lot in marketing. We talked about it, that when we start to invest in marketing, we see things starting to be according to plan, we got increased our investment in marketing and we do. I will give you two examples. CPXs, historically, we used to have three global CPX's, which we had a huge increase in the presence there, this year. Over 30% increased, so that’s one example of CPX's in Q1, that’s a significant increase in the expense there. And we are doing local CPX's across the U.S., across Europe, across Asia, which also will increase the marketing expenses. We increased presence in third-party events and so on. So we do encourage headcount and investment in marketing in events Check Point events or third-party events.
Okay. Okay, thanks. And I guess maybe just one other question, just sort of dust off an old one, and the question has to do with virtual firewalls in the public cloud. Is there any change in option or even discussion, I realize it's early, but some of the work survey that we've done says that customers plan, once they do start to move more aggressively enterprises anyway to the public cloud, they plan to use same vendors that they are using on-prem. But customers change their mind all the time, right? And I know there's different kinds of security that has assessed these in the cloud. But I'm just curious in your virtual firewall and your products, is there any change in demand or any change in discussion with your customers.
That’s actually the part that’s doing very well in the cloud. I mean, there are other parts in the cloud that are doing well, but our virtual firewall sales in the cloud are actually growing quite nicely. Again, and there's much more potential there, but slowing nicely. We also have a nice growth rate for our SaaS solution, which is a completely new field in that regard. So definitely we have a lot -- and again we have at least three, four elements today just in the potential on the cloud and I think it's going well overall.
Okay, great. Well, thank you.
I would just add that the cloud, when we look at their part in the subscription it's actually becoming quite nice. It's -- I can't give you the number right now, but I can tell you it's growing quite nice. The growth is over 70% and its drawing and it's no longer -- if you tell the millions a year probably going to be by the end of the year, so it's becoming quite significant there.
Thank you. Our final question today is coming from Sterling Auty from JPMorgan. Your line is now live.
Hey, guys. Not to mention of new customers and Gil you mentioned both augmentation and displacement. I’m curious if there's any in terms of where you’re seeing those win rates either by geography, by industry, by type of customer or even by use case?
I mean, in terms of industry, it's all over. I think I’ve mentioned that we have seen basically everything from construction to technology and everything in the middle, finance, manufacturing, and so on. Geography, Q1 was very strong in Europe and I think we have talked about it a number of times. Europe, at least this quarter got it right and these showing a nice growth for 18 new customers in the U.S. by seeing a nice change in the activity levels and I hope that will be translated to the actual results later on.
Okay. Then one follow-up. Did you guys make any changes to your pricing, either software blades or support for 2019?
Nothing, nothing. We have tweaks in the pricing, but nothing dramatic.
Thank you. We reached end of our question-and-answer session. I would like to turn the floor back over to management for any further or closing comments.
Thank you everyone for joining us today. We look forward to seeing you throughout the quarter. If you do have any calls that you'd like to have with us, please just send us an email and we’ll try to get back to as quickly as possible. Thank you and have a great day. Bye-bye.
Thank you. This concludes today's teleconference. You may disconnect your lines at this time and have a wonderful day. We thank you for your participation today.