Fortinet, Inc. (FTNT) Q4 2024 Earnings Call
Fortinet, Inc. (NASDAQ:FTNT) Q4 2024 Earnings Conference Call February 6, 2025 4:30 PM ET
Company Participants
Aaron Ovadia - Director of Investor Relations
Ken Xie - Founder, Chairman & Chief Executive Officer
Keith Jensen - Chief Financial Officer
John Whittle - Chief Operating Officer
Christiane Ohlgart - Chief Accounting Officer & Sales Operations Leader
Conference Call Participants
Tal Liani - Bank of America
Gabriela Borges - Goldman Sachs
Brian Essex - JPMorgan
Fatima Boolani - Citi
Shaul Eyal - TD Cowen
Rob Owens - Piper Sandler
Eric Heath - KeyBanc Capital Markets
Saket Kalia - Barclays
Shrenik Kothari - Baird
Junaid Siddiqui - Truist Securities
Joseph Gallo - Jefferies
Ittai Kidron - Oppenheimer & Co.
Operator
Good day and thank you for standing by. Welcome to the Fortinet Fourth Quarter 2024 Earnings Announcement Conference Call. At this time, all participants are in a listen-only mode. After the speaker's presentation, there will be a question-and-answer session. [Operator Instructions] Please be advised today's conference is being recorded.
I would now like to hand the conference over to your speaker today, Aaron Ovadia, Senior Director of Investor Relations. Please go ahead.
Aaron Ovadia
Thank you and good afternoon, everyone. This is Aaron Ovadia, Senior Director of Investor Relations at Fortinet. I am pleased to welcome everyone to our call to discuss Fortinet's financial results for the fourth quarter and full year of 2024. Joining me on today's call are Ken Xie, Fortinet's Founder, Chairman and CEO; and Keith Jensen, our CFO; John Whittle, our COO; and Christiane Ohlgart, our CAO and sales operations leader. This is a live call that will be available for replay via webcast on our Investor Relations website. Ken will begin our call today by providing a high-level perspective on our business. Keith will then review our financial and operating results for the fourth quarter and full year of 2024 before providing guidance for the first quarter and full year of 2025. We will then open the call for questions. During the Q&A session, we ask that you please limit yourself to 1 question and one follow-up question to allow others to participate.
Before we begin, I'd like to remind everyone that on today's call, we will be making forward-looking statements and these forward-looking statements are subject to risks and uncertainties which could cause our actual results to differ materially from those projected. Please refer to our SEC filings, in particular, the risk factors in our most recent Form 10-K and Form 10-Q for more information. All forward-looking statements reflect our opinions only as of the date of this presentation and we undertake no obligation and specifically disclaim any obligation to update forward-looking statements. Also, all references to financial metrics that we make on today's call are non-GAAP, unless stated otherwise. Our GAAP results and GAAP to non-GAAP reconciliations are located in our earnings press release and in the presentation that accompany today's remarks, both of which are posted on our Investor releases website. The prepared remarks for today's earnings call will be posted on the quarterly earnings section of our Investor Relations website following today's call. Lastly, all references to growth are on a year-over-year basis, unless noted otherwise.
I will now turn the call over to Ken.
Ken Xie
Thank you, Aaron and thank you to everyone for joining the call. We are pleased with our strong performance in the fourth quarter, successfully balancing growth and profitability, including record operation margin of 39%. Total revenue growth of 17%, including product revenue growth of 18%, our highest growth rate in 6 quarters as we further strengthen our market leadership in secure networking. A strong growth in Unified SASE and secure operation with security service age building growth of 85% which drove our Unified SASE growth of 13%, accounting for 23% of our business. The strong Unified SASE growth highlights the value that our customers see in our single vendor SASE strategy.
We are the only vendor to organically develop the key SASE functionality into a single operating system for DOS which integrates market-leading nextgen firewall, SD-WAN, DDNA, Secure Web Gateway, CASB, DLP and other innovations seamlessly unifying networking and security, delivering an enhanced user experience and securing access to applications across on-premise and cloud environment. This infra SD-WAN customer can deploy for case in the cloud or on-premise within minutes. We also enable sovereign SASE for service providers and large enterprise to hold forest within their own data center, enabling tighter control of their data and great connectivity while leverage our FortiASIC technology to accelerate SASE function for superior performance.
Additionally, Fortinet's AI power security, unified management and single agent approach provide consistent protection across all locations and devices, ensuring full control, visibility and simplified deployment while also offering industry's simplest licensing and 35 data performance per user driven secure operation accounted for 11% of total building, while ARR grew 32%. We recently enhanced our secure portfolio by acquiring perception point, a leader in advanced e-mail and collaboration security. This acquisition strengthens our end-to-end cyber security by extending protection beyond e-mail to the entire modern workspace, addressing the growing advanced rate risk in today's elevated threat environment.
In secure networking, we continue to lead inventory with a convergence and consolidation strategy, a recon we have been drilling for 25 years. Industry forecasts predict that secure networking will surpass traditional networking by 2026 as the number 1 secure networking vendor, Fortinet has secured over half of all global firewalls and lead the convergence trend.
Also as shown on Slide 4, Fortinet continues to be the only vendor to leverage a single operation system, FortiOS, across 5 secure networking Gartner Magic Quadrant. Customers are increasingly recognize that our FDS and food ASIC technology delivery of 5x to cane at performance than competitors while enhancing security effectiveness and reducing total cost of ownership. This is especially evident in the operation technology where OT sales approached $1 billion in 2024. Today, we introduced the 40-day strategy, 5G and 7G next-generation firewall and a unified SaaS solution. designed for SMB and distributed enterprise with cognate performance and enhanced security delivering up to flag to Connex faster support and better threat protection than industry average and supporting a wide range of secure network interface for remote access. In addition, we recently acquired the remaining share of Linx a leading provider of connectivity solutions to expand our enterprise grade security to employee was remotely home business and consumers.
Lastly, I'm very proud to share that Fortinet was recently recognized on Ford's most trust company in our market list, ranked number 7 overall and the only cyber secure company in the top 50 list, highlighting our transparency and commitment to our customer as the most trust cybersecurity company. I would like to thank our employees, customers, partners and suppliers worldwide for their continuous support and hard work.
I will now turn the call over to Keith.
Keith Jensen
Thank you, Ken. Thank you, Aaron and good afternoon, everyone. Let's start with the key highlights from the fourth quarter. We delivered strong execution results above the high end of guidance, together with record operating margin at 39%. Total revenue grew 17%, driven by strong product and service revenues as product revenue growth pushed up to 18%. In addition, we added a record 6,900 new logos driven by close alignment with our channel partners.
Looking at our financial results in more detail. Total billings grew 7% to $2 billion, including double-digit security operations and Unified SASE growth, RPO grew 12% to $6.4 billion. ARR growth was very strong for SecOps and grew 32% and unified SASE which grew at 28% and to a combined total of over $1.5 billion. Within Unified SASE, SASE continues to gain traction with ARR growth of 96% and as we continue to see early success upselling 40 SASE to our large SD-WAN customer base.
For SASE deals increased over 60% and the pipeline was up 90%. The typical FortiSASE journey starts with the customer's first purchase of our ASIC-based market-leading FortiGate firewall, followed by an expansion to SD-WAN and then to our single vendor SASE solution. The expansion journey is particularly significant as over 70% of our large enterprise customers have adopted our SD-WAN functionality and are poised to expand to FortiSASE. Our large enterprise FortiSASE penetration rate increased to 10%. That's up 2 points just since our November Analyst Day reporting.
Rounding out the billings commentary, deals between $5 million and $10 million increased over 90%. SMB was our top-performing customer segment with growth of over 30% and EMEA was our best-performing geography, driven by growth of over 25% from international emerging. Among our top 5 verticals, worldwide government and service provider both grew over 20% while financial services saw the expected challenge from the difficult year-over-year comparison, driven by several 7-figure and 8-figure deals in the fourth quarter of 2023.
Turning to revenue and margins. Total revenue grew 17% to $1.66 billion. Product revenue increased 18% to $574 million, our highest growth rate in 6 quarters, driven by hardware revenue growth of 19%. On a sequential basis, product revenue increased 21% and represents the third quarter in a row with elevated sequential growth. Software license revenue continued its double-digit growth and represented a mid- to high-teens percentage of total product revenue. Service revenue of $1.09 billion grew 17% and to 65% of total revenue. Service revenue growth was driven by SaaS solutions at 130% which includes Lacework as well as strong organic services growth in Unified SASE and SecOps.
Combined revenue from software licenses and software services such as cloud, Lacework and other SaaS security solutions, increased 41% and provides an annual revenue run rate of over $1 billion. Total gross margin increased 340 basis points to 81.9% and exceeded the high end of the guidance range by 140 basis points. Product gross margin of 69.3% increased 920 basis points as inventory-related charges normalized from last year's highly elevated levels, adding 840 basis points to product gross margin and 290 basis points to total gross margin
Service gross margin of 88.6% increased 50 basis points to a quarterly record as service revenue growth outpaced labor and hosting cost increases while benefiting from the mix shift towards higher-margin FortiGuard security subscription services as well as some early AI-related savings. Operating margin increased 720 basis points to a record 39.2%. It was 520 basis points above the high end of the guidance range, reflecting the strong gross margin an FX tailwind of about 110 basis points as well as the top line overperformance that flow through to the bottom line.
Before moving to the statement of cash flows, I'd like to summarize the financial impact from the Lacework, Next DLP and perception point acquisitions. These acquisitions increased fourth quarter billings by 115 basis points versus our expectation of 75 basis points and decreased operating margin by 190 basis points versus our expectation of a decrease of 230 basis points.
Looking to the statement of cash flow summarized on Slides 18 through 21. Free cash flow was $380 million and free cash flow margin was 23%, up 11 points. Adjusted free cash flow was $549 million, representing a margin of 28%, up 16 points. Cash taxes were $156 million, down $186 million reflecting the prior year's regulatory extension of estimated tax payments, while infrastructure investments were $98 million or up $71 million. Average contract term in the fourth quarter was 29 months, down 1 month year-over-year and up 1 month quarter-over-quarter. DSO decreased 10 days, reflecting improved linearity year-over-year. And the remaining share buyback authorization is $2 billion.
Moving to an overview of our 2024 full year results. Billings exceeded $6.5 billion, while total revenue grew 12% to $5.96 billion driven by revenue growth of around 25% for both Unified SASE and SecOps. Service revenue grew 20% to $4.05 billion, driven by a 22% increase in security subscriptions and 33% growth in Unified SASE services. Gross margin was up 390 basis points to 81.3%, benefiting from the revenue mix shift to service revenue and 140 basis point tailwind of inventory-related charges normalized during the year. Operating margin increased 660 basis points to a record 35%. And resulting in operating income of $2.1 billion which was up 38%.
Our GAAP operating margin of 30.3% continues to be one of the highest in the industry. Earnings per share increased 45% to $2.37. Free cash flow was a record $1.9 billion, representing a margin of 32%. Adjusted free cash flow was $2.2 billion, representing a margin of 37%. If I would just sum up 2024, I think it's important to note that we have now met or exceeded the Rule of 45 for the fifth consecutive year.
Now, I'd like to share a few significant fourth quarter wins showcasing our SASE expansion and our leadership and operational technology. In a 7-figure new customer win, a health care provider strategically included FortiSASE in its first for a net purchase alongside SD-WAN, while replacing a competitor's firewall. With a new leadership team focused on vendor consolidation, reduced operating cost and complexity and addressing technical debt the FortiOS consolidated multiple security functions onto a single platform, modernize and outdated firewall infrastructure and replace VPN technologies with a 5,000-seat SASE solution that relies on Fortinet PoPs.
In another 7-figure SASE deal in the existing Fortune 500 SD-WAN retail customer purchased 40 SASE for 2,000 users with the potential to scale up to 12,000. They chose Fortinet for it's flexible and consistent security enforcement which enhances user experience while securing access to both on-prem and cloud applications. Additionally, they valued our strategy of building our own SASE delivery infrastructure powered by our proprietary ASIC technology.
And lastly, in a high 7-figure deal, a large energy company expanded its partnership with us by signing us first enterprise agreement to protect this global critical infrastructure. This customer secures its infrastructure using FortiGates across approximately 1,000 sites, spanning branch locations, data centers and cloud environments. Key factors in this win included our ability to support their global critical infrastructure both technically and through world-class support programs. Our leadership in OT infrastructure capabilities and the automation and seamless integration of our FortiOS system.
With Fortinet supplying over 50% of the firewalls worldwide, Fortinet security solutions themselves have become critical infrastructure, protecting the critical infrastructure. In the threat landscape where there has been a step-level increase in sophistication and risk. Given our scale, innovation and broad adoption, we and national cybersecurity agencies around the world view our partnership is key to protecting the most important customers and entities in this dynamic landscape.
Next, I'd like to review some of our key AI solutions for Threat Intelligence, networking, Knock and Sock and LLM leakage. For Threat Intelligence, FortiGuard AI power security services, combined with real-time threat intelligence helps organizations combat known, unknown zero-day and emerging AI-based threats. For networking, FortiAI Ops reduces the time needed to diagnose networking issues. By monitoring trends of the network and with full access to logs across a Fortinet Security Fabric, our AI engine uses machine learning to understand the optimal conditions for the network and highest potential issues.
For the Knock and Sock, FortiAI uses natural language and generative AI to guide, simplify and automate analyst activities. FortiAI is integrated into 7 different network and security operation products with additional products to be added. For LLM leakage, our AI-based DLP services actively identify and bought sensitive information from being uploaded or shared with AI systems.
Before discussing our guidance, I'll offer a few updates on the record-level firewall upgrade opportunity that we shared during our November Analyst Day. In the fourth quarter, we saw early upgrade movement with large enterprises, both on buying plans and actual purchases. We expect the momentum to build as we move into the second half of 2025 as we get closer to the 2026 into service dates. The 2026 and 2027 cohorts present a substantial upsell opportunity for SASE switches, access points and SecOps solutions.
To maximize our upgraded cross-sell potential, we're implementing several initiatives, including creating sales plays for each customer segment and key vertical, expanding our account plans for larger enterprises to more specifically target the upgrade and expansion opportunities. And collaborating with our channel partners on SMB opportunities, incentive programs, end user data and developing targeted bundle offerings for these customers.
Moving on to guidance. As a reminder, our first quarter and full year outlook which are summarized on Slides 23 and 24, are subject to disclaimers regarding forward-looking information that Aaron provided at the beginning of the call. I should note, we expect Linxus and Perception Point to increase first quarter billings and revenue growth by approximately 90 basis points. and decreased operating margin around 40 basis points. For the full year, we expect Linx and Perception Point to increase billings and revenue growth by approximately 125 basis points and decreased operating margin by around 50 basis points.
All right. For the first quarter, we expect billings in the range of $1.520 billion and $1.600 billion which at the midpoint represents growth of 11%. The revenue in the range of $1.500 billion to $1.560 billion which at the midpoint represents growth of 13%. Non-to-GAAP gross margin of 80% to 81%, non-GAAP operating margin of 30% to 31%, non-GAAP earnings per share of $0.52 to $0.54 which assumes a share count of between $774 million and $780 million. Infrastructure investments of $80 million to $100 million; a non-GAAP tax rate of 18% and cash taxes of $30 million to $35 million.
For the full year, we expect billings in the range of $7.2 billion to $7.4 billion which at the midpoint represents growth of 12%. We revenue in the range of $6.65 billion to $6.85 billion which at the midpoint represents growth of 13%. Service revenue in the range of $4.575 billion to $4.725 billion which at the midpoint represents growth of 15%. Non-GAAP gross margin of 79% to 81%, non-GAAP operating margin of 31% to 33%, non-GAAP earnings per share of $2.41 to $2.47 and which assumes a share count of between $773 million and $783 million.
Infrastructure investments of $380 million to $430 million, a non-GAAP tax rate of 18% and cash taxes between $525 million and $575 million. And on a personal note, you have made read in today's 8-K filing that after a 4-decade career in finance, including 11 years of Fortinet, it's time for a me to enjoy retirement. I'll continue to serve through the next quarter earnings call and up to May 15 and plan to stay at Fortinet to help with the transition through June 30. Most importantly, I'm leaving Fortinet in very good hands. Pursuant to our succession plan, Christiane Ohlgart who, as discussed in the 8-K has served in various roles at Fortinet for almost 6 years. We'll take over as CFO as my step down in May.
I'd like to thank Ken, Michael and the Fortinet team and all of you for making this chapter of my lifestyle rewarding. I very much appreciate the time I've had for networking with Kim, Michael, the entire team and certainly with the investors and financial analysts. I know on this for that is people, customers and its noble mission to protect and serve important customers and entities around the world.
Ken Xie
Thank you, Keith, for your great service and contribution. And Christiane, we're looking forward to working with you, your new role continue to drive the success of Fortinet.
So, I will now hand the call over to Aaron for the Q&A session.
Aaron Ovadia
Thank you, Ken. As a reminder, during the Q&A session, we ask that you please limit yourself to 1 question and 1 follow-up question to allow others to participate.
Operator, please open the lines for questions.
Question-and-Answer Session
Operator
[Operator Instructions] Our first question comes from the line of Hamza Fodderwala with MS.
Unidentified Analyst
This is Jonathan [ph] on for Hamza. First off, Keith, congratulations on your career and best of luck with retirement and with your next endeavors. So Ken, for you, so I believe some of the hyperscalers like Oracle or big customers and partners with Fortinet. So just curious, as you have Oracle and some of the other hyperscalers building out new data centers, just curious to what extent Fortinet is involved in securing these.
Ken Xie
Yes. Thank you. It's a great question. So Fortinet is the only company, we developed the secure ASIC processor is increasing the secure computing power quite a lot compared using general purpose CPU. That drove a lot of our growth into we call it internal segmentation within the data center hyperscale and all these things. So we see a huge opportunity and not just the secure network in there but also a lot of data center also related to AI. We also see heat opportunity to drive the AI security, whether secure the infrastructure to self or secure the data of secure the access. So there's a lot of opportunity. I do believe that's the huge potential for growth because of a unique advantage using the for ASIC.
Operator
Our next question comes from the line of Tal Liani with Bank of America.
Tal Liani
It's an honor for me to ask a question after John [ph], my ex-associate across the line. I want to ask you 2 things. Number one is about billings. Why is billing weak and weak guidance? And that second question is product revenues outperformed so much this quarter and that might be a cycle, refresh cycle but the guidance for next quarter, I don't see outperformance. So, why is it just this quarter phenomenon and you don't carry the strength into the next few quarters?
John Whittle
Yes, Tal, I wasn't sure on your first question about billings, if you were asking about the fourth quarter or the first quarter.
Tal Liani
I'm asking billing in general. So billing for the fourth quarter was better but billing for the first quarter is weaker. So why is the weakness in billing?
John Whittle
Yes. I think -- I think the -- if you look at the fourth quarter, maybe we'll start there a little bit. As you recall, we talked last quarter about the fourth quarter guidance process, there was a lot of concern around the quarter, probably the 8-figure deals and what we were going to get out of that and we were being cautious in the guidance. That was logically rather a prudent approach where we got the upside was on those deals from $5 million to $10 million. And I would say the close rate and the opportunity there was probably $40 million to $50 million more than what I anticipated in the guidance setting process. And you saw that same overperformance on the larger deals show itself in the product revenue line. And then also we saw in the product revenue line.
Our significant growth in product revenue was in the mid-enterprise -- pardon me, the midsized firewalls and the large firewalls. And when you peel back on that onion, you start to see enterprise companies have actually started their purchasing of the refreshes that we talked about at the Analyst Day. So I think obviously, the information and news about Q4 is very good. I think if you look at in Q1, whether it's billings or product revenue, probably just a little more caution there as we kind of got exposed to the tariffs here over the last week and we saw the reaction and some of the concerns for us with more of a multinational footprint, particularly in Latin America and Canada, for example, the customer footprint, a little more exposure there. And then, of course, the direct impact of perhaps some disruption in the U.S. government where we do have a footprint also. So maybe a little caution in that regard.
Ken Xie
Yes. The other probably may impact some of the buildings really. We are more also driving the AR RPO which a little bit different than before. It's more about building but this is RPO AR probably would defer some building to the future but will kind of secure the customer with all this the platform, the unified approach. That's where the SASE and the SecOps tend to have a higher growth in the AR and IPO than the building.
Operator
Our next question is going to come from the line of Gabriela Borges with Goldman Sachs.
Gabriela Borges
I would love to hear a little bit more on the refresh opportunity for this year. I know you've broken it out for us in product versus cross-sell in a couple of different ways. I wanted to ask you specifically about the implications for subscription revenue as you see the hardware come up for renewal. And as you sell some of the networking components on the hardware side and to our installed base. So either for Keith or maybe Christiane, how do you think about the implications for subscription, specifically as hardware comes up?
Keith Jensen
Christiane, do you want to jump in there?
Christiane Ohlgart
Okay. I think at the Analyst Day, I explained a little bit that the existing hardware has subscriptions. In order to grow subscription revenue, we need to upsell and sell either more subscriptions with the same hardware or more services. So we have put plans and incentives in place for our sellers and our channel partners to do so. But that's kind of the prerequisite for us to grow our service revenues or accelerate the service revenues.
Ken Xie
Also the new hardware tend to be -- have more capacity to run additional function and better performance. That's also able additional service, including a lot of new service we developed in the FortiOS in the last few years as all the Unified SASE function and some other AI kind of based function. That gives the new opportunity and leverage new hardware.
Operator
Our next question comes from the line of Brian Essex with JPMorgan.
Brian Essex
Keith, I thought when you started with key highlights for the quarter, your retirement would be up to the top. But Seriously, it's been a real pleasure working with you and best of luck on the retirement, well deserved and Christiane looking forward to working with you. So congratulations on the appointment as CFO. I guess the question I had was with regard to the billings guide for this next fiscal year. would love it if -- maybe Christiane, if I think you've done a lot of work on it, if you could unpack the assumptions behind that? How much is upgrade growth of SecOps and SASE and how much is product-related refresh cycle baked into that? And maybe if you could share an exit rate, that would be super helpful.
Christiane Ohlgart
So in our billings and revenue guidance, of course, we have the 2 components, right? Product is what we said this year. Services is what we -- what was off the balance sheet, mostly and about 15% from new services that we are selling this year. And our assumptions, of course, are, as we presented at the Analyst Day that we have a significant upsell component but we also are planning to -- with certain incentives for, again, our own sellers as well as our channel partners to drive new logos. And from an exit rate perspective, were you looking at exit rate for services?
Brian Essex
I guess overall for billings? And then maybe if you can Help us understand how much product revenue is baked into that. But really just trying to get a sense of the trajectory that you're baking into billings to kind of get to that full year billings guidance that you have.
Christiane Ohlgart
The product revenue growth, we assume is around 10% right now as we saw already a significant traction this year but Yes, that's the current running assumption.
Brian Essex
Okay, that's helpful. And is that -- does that require like the exit rate in 4Q of like teens like high teens billings growth? Or are you expecting a more moderate build throughout the year?
Christiane Ohlgart
Right now, it's more moderate.
Operator
Our next question comes from the line of Fatima Boolani with Citi.
Fatima Boolani
Keith, congratulations by hope you very much have an enjoyable ride into the sunset? It's been terrific partnering with you. I wanted to go back to some of the commentary you made on the tariff impact. I did want to dig into that a little bit. So I think there is a significant amount of uncertainty from these tariffs. They're influx there's some potential retaliatory policies being thrown around. So I both wanted to dig into some of the demand comments you made and how far ranging those are and how they are being contemplated in guidance? And then also from a supply chain perspective, how is that influencing or potentially impacting your supply chain and ultimately COGS and gross margins.
Keith Jensen
Yes. I'll -- it's -- as you pointed out, it's going to be a dynamic time, if you will and trying to understand where these may end up. I would say that for selling purposes for demand. We have a fairly significant footprint in both Latin America and Mexico as well as Canada. And over the weekend, when the tariffs were announced, there was a lot of activity here internally Sunday night and Monday morning to understand what the disruption would be more about those economies and their buying habits, if you will, of our products. And I think it's that type of reaction that we are focused on. I would also supplement that by a little more context. Our 40 authenticator product, I believe it is, is actually -- it's a very small product line but it is manufactured in Canada and we were looking at what the tariff impact would be like that. And then by Monday night, all those things -- all bets are off. So we're kind of chasing it a little bit.
And we do have, similar to our sales leadership in Latin America raising their hand immediately and what they were seeing and being concerned about with Mexico. Our U.S. federal team similarly raised their hand and said, if there aren't going to be employees of the federal government to sell to, it's going to be challenging. So I just think we're acknowledging that it's a very dynamic situation right now and let's try and not get too far out of our skis until we know more.
On the other side, I think, in terms of tariffs coming into the country or the products Keep in mind that our pure U.S. business is around 25%, 26%, 27% of our total business. So obviously that 30% -- probably 30% plus international would not be subject to the tariff schemes of the U.S. And I think there's obviously -- if we had to respond in some way, to the market. I think the tariffs would be broad brush and would affect not only ourselves in our U.S. business for that remaining 25%, 26% but our competitors as well. And I would expect that we would still, at this early stage, still have the pricing advantage that we currently have.
Operator
Our next question comes from the line of Shaul Eyal with TD Cowen.
Shaul Eyal
Congrats on results. Congrats Keith and congrats, Christiane. Keith, my question maybe builds a little bit on the prior question but touch us more specifically on your U.S. performance. This year, you had, I think, this quarter, the best quarterly performance in 2024, do you see that being sustained into 2025 given some of your prior investments? What are the plans specifically as it relates to U.S. sales operations?
Ken Xie
Yes, it's a great question. So I think probably starting a little bit over 1 year ago, we're starting enhanced the U.S. enterprise sales. and also more focused on like adding sales capacity and also kind of working closely with our channel partners to drive the growth. which both in the high con and also drive the program with the partner there. So that's -- we see some pretty good results. And so we do see there's a lot of loans to grow in the U.S. And at the same time, we have a huge advantage on the resource on the facility on the people here in the U.S. and Canada that continue drive the future growth. So that's where we see the U.S. could be the fast-growing region in the next few years.
Operator
Our next question is going to come from the line of Rob Owens with Piper Sandler Company.
Rob Owens
Great. I was hoping you could expand a little bit just on the Linky relationship and what you hope it brings. And I know can you did outline some expectations relative to revenue and billings but just strategically where it positions you better?
Ken Xie
Yes. Linxus, actually we acquired about 51% of share about 3 years ago. And then we keep driving shaping the company to more line up with our own kind of secure networking strategy. But also, this is all kind of the new market, we feel Fortinet profit is the only player can play in the consumer home-based network security because we have this technology like ASIC, we have all this Unified SASE together with the Linx consumer and also the huge user base which they have 25 million active users and has been shipping almost 250 million device in the last almost 40 years.
So it's a leading brand. And with this customer base with our technology as the combined resources you we can really drive the new market for consumers to supporting work from home and also to cover some SMB space, we see pretty fast growth. So that's the strategy but that also probably will take some time to continue kind of divide about this technology market together but we do feel this could be a huge potential in the next 5 to 10 years for the company growth.
Operator
Our next question comes from the line of Eric Heath with KeyBanc.
Eric Heath
Keith, congrats as well. So Keith and Christiane, I wanted to understand a little bit just ahead of the refresh opportunity that's starting in the second half. How should we be thinking about inventory levels in anticipation of that demand. And then secondly, maybe to follow on to Brian's earlier question. Just the assumptions embedded in the product guidance specifically from the end of service refresh, are you assuming half of that $400 million to $450 million opportunity happens in 2025?
Keith Jensen
Yes. I'll cover off the inventory question a little bit and then maybe Christiane can come back over the top and talk a little bit more about the model for 2025. And I don't know that we excel accent specific dollar amounts to each individual item in that in any event. Ken and I've been at this for a long time. You guys have seen an inventory turn to 2. I like to see inventory turns of 5 or 6. I lose constantly on the inventory turns. We've gotten -- as we -- we've gone through the supply chain cycle here, you saw the inventory turns. We did very well with those storing inventory, if you will, on our balance sheet as we got into COVID and supply chain crisis and it really helps fuel the supercycle for us on our income statement.
And with that in mind, I think a healthy number for us. I'd have to agree with Ken now is probably in the range of 2x with the turns. And I would imagine that you would -- you could expect us to target that each quarter in terms of our inventory balances. Christiane?
Christiane Ohlgart
Yes, on the linearity of the product revenue assumptions, while there is definitely a compelling reason to refresh in the second half year because you can only renew for 1 year. we've seen refresh activity happen already, especially for large customers. And we will try to accelerate the upgrade cycle as much as we can. So we've assumed that there is a more gradual than kind of spiky upgrade part.
Operator
Our next question comes from the line of Saket Kalia with Barclays.
Saket Kalia
And tip my cap to both of you on your respective exciting next steps. So very clear numbers and a lot of helpful questions. Keith and Christian, maybe I'll ask just a couple of housekeeping questions, if I may. First, can you just remind us -- I think you touched on it a little bit. Can you remind us how big LatAm and Canada are just in terms of percentage of billings. And then maybe on top of that, can you just remind me of the 12% growth that we're guiding to roughly in 2025, how much of that is organic versus inorganic?
Christiane Ohlgart
To your first question, LatAm and Canada are about 15% of total business. And on the organic growth number, we expect about one point inorganic.
Operator
Our next question comes from the line of Adam Borg with Stifel.
Unidentified Analyst
You've got Max [ph] on here for Adam at Stifel. Over the last few quarters, we've talked about SASE and SecOps billings coming primarily from existing customers. So as we look out into '25, just wondering what the opportunity is for SASE and SecOps to become a more meaningful contributor to new logos? And do you -- or do you expect that to kind of remain as primarily an upsell motion?
Ken Xie
I think we do have a huge installation base on the next gen firewalls SD-WAN. I still feel grow upgrade from that to probably will come most of the new Unified SASE. And that's also more itself for the sales source and also for the partner. I believe in the last few quarters, probably over 90% customers -- leasing customers which are already firewall at firewall also SD-WAN customer which does give us also more advantage compared to all these SASE only player. So that's where -- and that's also the reason is also because we have the single OS. I have all this networking security result is SD-WAN and also all the SASE function, the same it is very easy upgrade.
On the other side, we do have a lot of new customers and especially some big enterprise. Some of them do have issue with some other state players and we do have a lot of advantage on the better function, better integration, single OS solution and much better performance and pricing, like I mentioned, probably 3 to 5x more price advantage and plus our own kind of infrastructure supporting this kind of lower cost, better margin. And the same time, integrate function together is more easy to manage and better protection. So that's the advantage we have. That's why we're also pretty confident. We believe we not only were leading the number 1 player in the next-gen firewall and the SD-WAN, we also give us some time. We're also leading unified sort player in the space.
Keith Jensen
Yes. And I think Ken's spot on in terms of the factors that -- and I'll build on one of those which is removing -- reducing complexity and reducing costs and making things simpler. I was really impressed with the first deal that I talked about in the earn script here when I talked to the sales team which was a pure white space account that started off as a competitive firewall displacement. And we know we're really good at that and we know how to do that. But then to see them consult and collaborate with the customer and make it not only an SD-WAN deal which mean a ton of SASE but also to get them in the boat on the SASI deal. And I think that speaks to -- we won a very good sales team that brought that to the table for us. But the evolution of the maturity that you're seeing in our own organization as we get more experience in our fleet and our ability to branch out and sell into those organizations that are focused on a consolidation play, removing complexity and controlling cost.
Ken Xie
That also will benefit from a lot of a long-term investment like in the single OS in the hardware and also in the ASIC. We are the only ASIC designer in the whole space. and a lot of new sides will drive the new SASE function will keep give us a much better performance, lower cost, lower power consumption and also the sovereign say for service provider for enterprise for data center, we also see a lot of growth potential. That's really the unique advantage Fortinet has.
Operator
Our next question comes from the line of Shrenik Kothari with Baird.
Shrenik Kothari
Just really solid Unified SASE growth rates you guys are seeing increased penetration among larger enterprises which in the earlier commentary was still building momentum. So just curious, can help provide an update on sartan centers which are tied to they're upselling Southcross and how these incentives are impacting overall kind of property metrics, deal conversion and yes. And then I had a follow-up question as well.
Ken Xie
Yes, really, we do want to accelerate the training to both our sales team, the technical team and also a partner. And it's -- but they do see -- the customer definitely see some of the long-term benefit of using a single OS to gradually adding more function and adding more security and easily upgrade to the next kind of security function they needed. And on the other side, I think that we also need to keeping higher end, keeping a sales capacity and at the same time, provide better training.
On the other side, we see the feedback already from customer partner. They do see the upgrade of SASE is much easier compared to this new SASE approach and the much shorter sales cycle. And you can see since like -- we only launch our own SASE approach a little bit over 1 year. And you can see the ramp-up is over quick probably the fast-growing in the SASE space right now. So we do see a lot of great retention going forward.
Operator
Our next question comes from the line of Junaid Siddiqui with Truist Securities.
Junaid Siddiqui
Keith and Christiane congrats to both of you. Keith, you mentioned SMB being one of the top-performing customer segments which is a bit different from what we hear from some of the other vendors I was just curious what is underpinning that demand? And what are you seeing that others are not?
Keith Jensen
Well, I think the channel program at Fortinet is probably fairly mature. I mean, Ken has been doing it for a long, long time. I don't think we're scrambling to find channel partners, if you will. I would also give a lot of credit to Christiane and what she's done in her year here which is really focused on the channel and getting to more senior levels with the channel leadership to understand what's important to them and how to structure incentives that are tailored to what the channel is trying to accomplish. There's just much more collaboration with channel partners today than I've ever seen before here.
And I think, these -- we had some fairly specific and targeted incentive programs in the fourth quarter that Christiane helped develop. And I think those were, as you see in the numbers, the new logos and 6,900 and the mix of the business, extremely successful.
Ken Xie
Yes. I also see we have probably the best product because not a competitor, not as small as technology single OS with so many is almost 30 function integrated in the single OS and with about half a function about 14, 15 using ASIC plus salaries, that's give us huge performance and functional advantage than any other competitor because the SMB, like the 3 model we announced today, they around the same for OS compared to some other big box, bigger plants there. And that's where the SMB and even the long term, the home users see some huge advantage. You've seen the same for FortiOS and they can kind of weather connect to the enterprise so they can they can connect to the cloud and also the labor this new Unified SASE approach.
So that's where we feel is a technology pro advantage gave us huge kind of unique benefit to our customers and the customer eventually can be the home user consumer space which we feel is because so far, even in the U.S. and Europe, the developed country, the SMB still had only single digit of SMB customer has any network security to protect their network in there. So we do see there's a lot of growth potential. But how to address this technology need to be easy to deploy, easy to use, easy to support and make AI and all this, that's where we kind of invest quite a long time and we do see is kind of a long-term benefit of this long-term investment and also a huge potential going forward.
Operator
Our next question comes from the line of Joseph Gallo with Jefferies.
Joseph Gallo
Keith, congrats on the much deserved retirement. And congrats to Christiane, look forward to working more with you. It was great to hear about the early end-of-life refresh demand. In those early renewals, how has the average deal size increased versus 4 years ago? I'm just trying to understand how you're thinking about the size of the cross-sell opportunity versus that $450 million product refresh?
Keith Jensen
Yes. I think I tried to make a point that what we've seen and I guess it kind of makes sense is that the larger enterprises are probably moving first. We expect that the SMBs may move a little bit later on the time line. they probably have less advanced purchasing departments and maybe less regulatory pressures and things of that nature. There's probably a lot of reasons for it. I think what you see in our large enterprises, historically is they often have a deployment schedule. They may not necessarily take all the equipment at 1 point in time but rather take a certain amount each quarter, maybe nothing in 1 quarter and more in the third quarter.
And that -- it was that same buying behavior patterns that I think we started to see in the fourth quarter, we are looking back at some of these more regulated industries, also some technology companies and we could see the swapping out of the mid-major products that are being end of life and then taking on new products. And we talked to the account person about, yes, they are on that runway and they will continue doing that now over the next several quarters.
Christiane Ohlgart
And let me add to what Keith just said regarding your question of average deal size. So as we have a lot of large customers that have enterprise agreements, they pretty much have an ongoing purchasing habit of replacement devices that they build out during the EA. So you don't necessarily see creeping up larger deals because they negotiate at a certain point in time what they need for the next 5 years and then they buy as they are ready to upgrade.
Operator
Our next question comes from the line of Ittai Kidron with Oppenheimer & Co.
Ittai Kidron
Congrats as well for both of you, Keith and Christiane. Good luck and enjoy retirement, Keith you earned it. A couple of questions for me. Just again on this upgrade cycle. If you know the devices and you can ping them and you know exactly where they are and when they get retired for the vast majority. Can you just be a little bit more specific on what was the contribution of this upgrade to revenue this past quarter? And what is the exact dollar contribution you expect from the upgrade in your 25 guide?
And the second question is for Ken on SASE. Great to see the progress in adoption over there. Can you comment though, of how much of the adoption with the large enterprise is against brownfield displacement of all SAS solutions or walking into a vacuum. Would love to understand how much of your footprint in your opinion as something that you need to displace versus you're stepping into a vacuum.
Keith Jensen
Yes. I think -- it's a great question. And keep in mind, with the 2-tier distribution model. We sell to distributors to sell to resell to sell to end users. And oftentimes, it's also SMB. The quality of the data about the end user gets better and better, the closer you get to the end user which would be every seller. And that's why you heard a reference in the script about the importance of working with them on data gathering. There's a bit of an honor system when they registered the devices. It may be more intuitive to us that, of course, we get a device register like our phone or something like that but that's not what happens in practice, particularly in the SMB. And really, there's a heavy reliance there on the channel to spend time and energy if you want to get good reporting and tracking on that.
So, we'll get better at it as we go and that's probably working closer with the channel partners. It is "easier" with the enterprises because we can talk to the -- to our sales rep is working in a large enterprise and understand the account plans and what they're seeing but you're still only getting a partial set of information I think the reporting and the information will get more mature as we go along. It's moving pretty quickly right now on us in terms of how we're developing it. Anyways...
Ken Xie
For your second question, actually, you can refer to the presentation, Slide number 5. So they do give some deeper penetration rate. I think for SASE, it's around 10%. It increased 2 points from like 2 months ago on Analyst Day. And then also large enterprise probably about 70%. So that's where we see with the leader in the firewall -- major firewall market and then that actually drive a lot of SD-WAN growth and then also after the SASE be the next growth we're keeping helping customers build better security infrastructure.
John Whittle
And in terms of your question, whether it's brownfield or not, we are seeing some of our biggest SASE deals as displacements of either legacy BPM providers or legacy SASE providers.
Operator
And I would now like to turn the conference back over to Aaron Ovadia for closing remarks.
Aaron Ovadia
Thank you. I'd like to thank everyone for joining today's call. We will be attending an investor conference hosted by Morgan Stanley during the first quarter. The fireside chat webcast link will be posted on the Events and Presentations section of Fortinet's Investor Relations website.
If you have any follow-up questions, please feel free to contact me. Have a great rest of your day.
Operator
This concludes today's conference call. Thank you for participating and you may now disconnect.
