Fortinet (NASDAQ: FTNT)
Q4 2024 Earnings Call
Feb 06, 2025, 4:30 p.m. ET
Operator
Good day, and thank you for standing by. Welcome to the Fortinet fourth quarter 2024 earnings announcement conference call. At this time, all participants are in a listen-only mode. After the speakers' presentation, there will be a question-and-answer session.
[Operator instructions] Please be advised today's conference is being recorded. I would now like to hand the conference over to your speaker today, Aaron Ovadia, senior director of investor relations. Please go ahead.
Aaron Ovadia -- Director of Investor Relations
Thank you, and good afternoon, everyone. This is Aaron Ovadia, senior director of investor relations at Fortinet. I am pleased to welcome everyone to our call to discuss Fortinet's financial results for the fourth quarter and full year of 2024. Joining me on today's call are Ken Xie, Fortinet's founder, chairman, and CEO; and Keith Jensen, our CFO; John Whittle, our COO; and Christiane Ohlgart, our CAO and sales operations leader.
This is a live call that will be available for replay via webcast on our investor relations website. Ken will begin our call today by providing a high-level perspective on our business. Keith will then review our financial and operating results for the fourth quarter and full year of 2024 before providing guidance for the first quarter and full year of 2025. We will then open the call for questions.
Before you buy stock in Fortinet, consider this:
The Motley Fool Stock Advisor analyst team just identified what they believe are the 10 best stocks for investors to buy now… and Fortinet wasn’t one of them. The 10 stocks that made the cut could produce monster returns in the coming years.
Consider when Nvidia made this list on April 15, 2005... if you invested $1,000 at the time of our recommendation, you’d have $765,024!*
Stock Advisor provides investors with an easy-to-follow blueprint for success, including guidance on building a portfolio, regular updates from analysts, and two new stock picks each month. The Stock Advisor service has more than quadrupled the return of S&P 500 since 2002*.
Learn more »
*Stock Advisor returns as of February 3, 2025
During the Q&A session, we ask that you please limit yourself to one question and one follow-up question to allow others to participate. Before we begin, I'd like to remind everyone that on today's call, we will be making forward-looking statements, and these forward-looking statements are subject to risks and uncertainties, which could cause our actual results to differ materially from those projected. Please refer to our SEC filings, in particular, the risk factors in our most recent Form 10-K and Form 10-Q for more information. All forward-looking statements reflect our opinions only as of the date of this presentation, and we undertake no obligation and specifically disclaim any obligation to update forward-looking statements.
Also, all references to financial metrics that we make on today's call are non-GAAP, unless stated otherwise. Our GAAP results and GAAP to non-GAAP reconciliations are located in our earnings press release and in the presentation that accompanies today's remarks, both of which are posted on our investor relations website. The prepared remarks for today's earnings call will be posted on the quarterly earnings section of our investor relations website following today's call. Lastly, all references to growth are on a year-over-year basis, unless noted otherwise.
I will now turn the call over to Ken.
Ken Xie -- Chairman and Chief Executive Officer
Thank you, Aaron, and thank you to everyone for joining the call. We are pleased with our strong performance in the fourth quarter, successfully balancing growth and profitability, including record operation margin of 39%. Total revenue growth of 17%, including product revenue growth of 18%, our highest growth rate in six quarters as we further strengthen our market leadership in secure networking, a strong growth in Unified SASE and secure operation with security service edge building growth of 85%, which drove our Unified SASE growth of 13%, accounting for 23% of our business. The strong Unified SASE growth highlights the value that our customers see in our single vendor SASE strategy.
We are the only vendor to organically develop the key SASE functionality into a single operating system for DOS, which integrates market-leading next-gen firewall, SD-WAN, ZTNA, Secure Web Gateway, CASB, DLP and other innovations seamlessly unified networking and security, delivering an enhanced user experience and securing access to applications across on-premise and cloud environment. This firewall SD-WAN, customer can deploy for SASE in the cloud or on-premise within minutes. We also enable sovereign SASE for service providers and large enterprise to host SASE within their own data center, enabling heightened control of their data and grid connectivity while leveraging our FortiASIC technology to accelerate SASE function for superior performance. Additionally, Fortinet's AI-powered security, unified management and single agent approach provide consistent protection across all locations and devices, ensuring full control, visibility, and simplified deployment while also offering industry's simplest licensing and 3x to 5x better performance per user driven secure operation accounted for 11% of total billing, while ARR grew 32%.
We recently enhanced our secure portfolio by acquiring Perception Point, a leader in advanced email and collaboration security. This acquisition strengthens our end-to-end cyber security by extending protection beyond email to the entire modern workspace, addressing the growing advanced threat risk in today's elevated threat environment. In secure networking, we continue to lead the industry with a convergence and consolidation strategy, a recon we have been driven for 25 years. Industry forecasts predict that secure networking will surpass traditional networking by 2026 as the No.
1 secure networking vendor, Fortinet has secured over half of all global firewalls and lead the convergence trend. Also as shown on Slide 4, Fortinet continues to be the only vendor to leverage a single operating system, FortiOS, across five secure networking Gartner Magic Quadrant. Customers are increasingly recognizing that our FDS and ASIC technology delivering 5x to 10x better performance than competitors while enhancing security effectiveness and reducing total cost of ownership. This is especially evident in the operation technology where OT sales approached $1 billion in 2024.
Today, we introduced the 40-day strategy, 5G and 7G next-generation firewall and a Unified SASE solution designed for SMB and distributed enterprise with cutting-edge performance and enhanced security delivering up to 5x to 10x faster support and better threat protection than industry average and supporting a wide range of secure network interface for remote access. In addition, we recently acquired the remaining shares of Linksys, a leading provider of connectivity solutions to expand our enterprise-grade security to employee was remotely home business and consumers. Lastly, I'm very proud to share that Fortinet was recently recognized on Forbes Most Trusted Companies in America list, ranked No. 7 overall and the only cyber secure company in the top 50 list, highlighting our transparency and commitment to our customer as the most trusted cybersecurity company.
I would like to thank our employees, customers, partners, and suppliers worldwide for their continuous support and hard work. I will now turn the call over to Keith.
Keith Franklin Jensen -- Chief Financial Officer
Thank you, Ken. Thank you, Aaron, and good afternoon, everyone. Let's start with the key highlights from the fourth quarter. We delivered strong execution and financial performance with top-line results above the high end of guidance, together with record operating margin at 39%.
Total revenue grew 17%, driven by strong product and service revenues as product revenue growth pushed up to 18%. In addition, we added a record 6,900 new logos driven by close alignment with our channel partners. Looking at our financial results in more detail. Total billings grew 7% to $2 billion, including double-digit security operations and Unified SASE growth, RPO grew 12% to $6.4 billion.
ARR growth was very strong for SecOps and grew 32% and unified SASE, which grew at 28% and to a combined total of over $1.5 billion. Within Unified SASE, SASE continues to gain traction with ARR growth of 96% and as we continue to see early success upselling FortiSASE to our large SD-WAN customer base. For SASE deals increased over 60% and the pipeline was up 90%. The typical FortiSASE journey starts with the customer's first purchase of our ASIC-based market-leading FortiGate firewall, followed by an expansion to SD-WAN and then to our single vendor SASE solution.
The expansion journey is particularly significant as over 70% of our large enterprise customers have adopted our SD-WAN functionality and are poised to expand to FortiSASE. Our large enterprise FortiSASE penetration rate increased to 10%. That's up two points just since our November Analyst Day reporting. Rounding out the billing's commentary, deals between $5 million and $10 million increased over 90%.
SMB was our top-performing customer segment with growth of over 30%, and EMEA was our best-performing geography, driven by growth of over 25% from international emerging. Among our top five verticals, worldwide government and service provider both grew over 20% while financial services saw the expected challenge from the difficult year-over-year comparison, driven by several seven- and eight-figure deals in the fourth quarter of 2023. Turning to revenue and margins. Total revenue grew 17% to $1.66 billion.
Product revenue increased 18% to $574 million, our highest growth rate in six quarters, driven by hardware revenue growth of 19%. On a sequential basis, product revenue increased 21% and represents the third quarter in a row with elevated sequential growth. Software license revenue continued its double-digit growth and represented a mid- to high-teens percentage of total product revenue. Service revenue of $1.09 billion grew 17% and to 65% of total revenue.
Service revenue growth was driven by SaaS solutions at 130%, which includes Lacework, as well as strong organic services growth in Unified SASE and SecOps. Combined revenue from software licenses and software services such as cloud, Lacework, and other SaaS security solutions, increased 41% and provides an annual revenue run rate of over $1 billion. Total gross margin increased 340 basis points to 81.9% and exceeded the high end of the guidance range by 140 basis points. Product gross margin of 69.3% increased 920 basis points as inventory-related charges normalized from last year's highly elevated levels, adding 840 basis points to product gross margin and 290 basis points to total gross margin.
Service gross margin of 88.6% increased 50 basis points to a quarterly record as service revenue growth outpaced labor and hosting cost increases while benefiting from the mix shift toward higher-margin FortiGuard security subscription services, as well as some early AI-related savings. Operating margin increased 720 basis points to a record 39.2%. It was 520 basis points above the high end of the guidance range, reflecting the strong gross margin and FX tailwind of about 110 basis points, as well as the top-line overperformance that flow through to the bottom line. Before moving to the statement of cash flows, I'd like to summarize the financial impact from the Lacework, Next DLP, and Perception Point acquisitions.
These acquisitions increased fourth quarter billings by 115 basis points versus our expectation of 75 basis points and decreased operating margin by 190 basis points versus our expectation of a decrease of 230 basis points. Looking to the statement of cash flow summarized on Slides 18 through 21. Free cash flow was $380 million, and free cash flow margin was 23%, up 11 points. Adjusted free cash flow was $549 million, representing a margin of 28%, up 16 points.
Cash taxes were $156 million, down $186 million reflecting the prior year's regulatory extension of estimated tax payments, while infrastructure investments were $98 million or up $71 million. Average contract term in the fourth quarter was 29 months, down one month year over year and up one month quarter over quarter. DSO decreased 10 days, reflecting improved linearity year over year. And the remaining share buyback authorization is $2 billion.
Moving to an overview of our 2024 full year results. Billings exceeded $6.5 billion, while total revenue grew 12% to $5.96 billion driven by revenue growth of around 25% for both Unified SASE and SecOps. Service revenue grew 20% to $4.05 billion, driven by a 22% increase in security subscriptions and 33% growth in Unified SASE services. Gross margin was up 390 basis points to 81.3%, benefiting from the revenue mix shift to service revenue and 140 basis point tailwind of inventory-related charges normalized during the year.
Operating margin increased 660 basis points to a record 35%. And resulting in operating income of $2.1 billion, which was up 38%. Our GAAP operating margin of 30.3% continues to be one of the highest in the industry. Earnings per share increased 45% to $2.37.
Free cash flow was a record $1.9 billion, representing a margin of 32%. Adjusted free cash flow was $2.2 billion, representing a margin of 37%. If I would just sum up 2024, I think it's important to note that we have now met or exceeded the Rule of 45 for the fifth consecutive year. Now I'd like to share a few significant fourth quarter wins showcasing our SASE expansion and our leadership and operational technology.
In a seven-figure new customer win, a healthcare provider strategically included FortiSASE in its first Fortin net purchase alongside SD-WAN, while replacing a competitor's firewall. With a new leadership team focused on vendor consolidation, reduced operating cost and complexity and addressing technical debt the FortiOS consolidated multiple security functions onto a single platform, modernized outdated firewall infrastructure, and replaced VPN technologies with a 5,000-seat SASE solution that relies on Fortinet PoPs. In another seven-figure SASE deal in the existing Fortune 500 SD-WAN retail customer purchased 40 SASE for 2,000 users with the potential to scale up to 12,000. They chose Fortinet for its flexible and consistent security enforcement, which enhances user experience while securing access to both on-prem and cloud applications.
Additionally, they valued our strategy of building our own SASE delivery infrastructure powered by our proprietary ASIC technology. And lastly, in a high seven-figure deal, a large energy company expanded its partnership with us by signing us first enterprise agreement to protect this global critical infrastructure. This customer secures its infrastructure using FortiGates across approximately 1,000 sites, spanning branch locations, data centers and cloud environments. Key factors in this win included our ability to support their global critical infrastructure both technically and through world-class support programs.
Our leadership in OT infrastructure capabilities and the automation and seamless integration of our FortiOS system. With Fortinet supplying over 50% of the firewalls worldwide, Fortinet security solutions themselves have become critical infrastructure, protecting the critical infrastructure. In the threat landscape where there has been a step-level increase in sophistication and risk. Given our scale, innovation and broad adoption, we and national cybersecurity agencies around the world view our partnership is key to protecting the most important customers and entities in this dynamic landscape.
Next, I'd like to review some of our key AI solutions for threat intelligence, networking, NOC and SOC and LLM leakage. For Threat Intelligence, FortiGuard AI-powered security services, combined with real-time threat intelligence helps organizations combat known, unknown zero-day and emerging AI-based threats. For networking, FortiAI Ops reduces the time needed to diagnose networking issues. By monitoring trends of the network and with full access to logs across a Fortinet Security Fabric, our AI engine uses machine learning to understand the optimal conditions for the network and highest potential issues.
For the NOC and SOC, FortiAI uses natural language and generative AI to guide, simplify and automate analyst activities. FortiAI is integrated into seven different network and security operation products with additional products to be added. For LLM leakage, our AI-based DLP services actively identify and block sensitive information from being uploaded or shared with AI systems. Before discussing our guidance, I'll offer a few updates on the record-level firewall upgrade opportunity that we shared during our November Analyst Day.
In the fourth quarter, we saw early upgrade movement with large enterprises, both on buying plans and actual purchases. We expect the momentum to build as we move into the second half of 2025 as we get closer to the 2026 into service dates. The 2026 and 2027 cohorts present a substantial upsell opportunity for SASE switches, access points and SecOps solutions. To maximize our upgrade cross-sell potential, we're implementing several initiatives, including creating sales plays for each customer segment and key vertical, expanding our account plans for larger enterprises to more specifically target the upgrade and expansion opportunities.
And collaborating with our channel partners on SMB opportunities, incentive programs, end user data, and developing targeted bundle offerings for these customers. Moving on to guidance. As a reminder, our first quarter and full year outlook, which are summarized on Slides 23 and 24, are subject to disclaimers regarding forward-looking information that Aaron provided at the beginning of the call. I should note, we expect Linksys and Perception Point to increase first quarter billings and revenue growth by approximately 90 basis points.
and decreased operating margin around 40 basis points. For the full year, we expect Linksys and Perception Point to increase billings and revenue growth by approximately 125 basis points and decrease operating margin by around 50 basis points. All right. For the first quarter, we expect billings in the range of $1.520 billion and $1.600 billion, which at the midpoint represents growth of 11%.
The revenue in the range of $1.500 billion to $1.560 billion, which at the midpoint represents growth of 13%. Non-to-GAAP gross margin of 80% to 81%, non-GAAP operating margin of 30% to 31%, non-GAAP earnings per share of $0.52 to $0.54, which assumes a share count of between $774 million and $780 million. Infrastructure investments of $80 million to $100 million; a non-GAAP tax rate of 18% and cash taxes of $30 million to $35 million. For the full year, we expect billings in the range of $7.2 billion to $7.4 billion, which at the midpoint represents growth of 12%, with revenue in the range of $6.65 billion to $6.85 billion, which at the midpoint represents growth of 13%.
Service revenue in the range of $4.575 billion to $4.725 billion which at the midpoint represents growth of 15%. Non-GAAP gross margin of 79% to 81%, non-GAAP operating margin of 31% to 33%, non-GAAP earnings per share of $2.41 to $2.47 and which assumes a share count of between $773 million and $783 million. Infrastructure investments of $380 million to $430 million, a non-GAAP tax rate of 18% and cash taxes between $525 million and $575 million. And on a personal note, you may read in today's 8-K filing that after a four-decade career in finance, including 11 years of Fortinet, it's time for me to enjoy retirement.
I'll continue to serve through the next quarter earnings call and up to May 15th and plan to stay at Fortinet to help with the transition through June 30th. Most importantly, I'm leaving Fortinet in very good hands. Pursuant to our succession plan, Christiane Ohlgart who, as discussed in the 8-K, has served in various roles at Fortinet for almost six years, will take over as CFO as I step down in May. I'd like to thank Ken, Michael, and the Fortinet team and all of you for making this chapter of my life rewarding.
I very much appreciate the time I've had at Fortinet working with Ken, Michael, the entire team and certainly with the investors and financial analysts. I know I'll miss Fortinet, its people, customers, and its noble mission to protect and serve important customers and entities around the world.
Ken Xie -- Chairman and Chief Executive Officer
Thank you, Keith, for your great service and contribution. And Christiane, we're looking forward to working with you, your new role continues to drive the success of Fortinet. So, I will now hand the call over to Aaron for the Q&A session.
Aaron Ovadia -- Director of Investor Relations
Thank you, Ken. As a reminder, during the Q&A session, we ask that you please limit yourself to one question and one follow-up question to allow others to participate. Operator, please open the line for questions.
Operator
Thank you. [Operator instructions] Again, one moment for our first question. Our first question comes from the line of Hamza Fodderwala with MS. Your line is open.
Please go ahead.
Jon Eisenson -- Analyst
Hey, thank you for taking my question This is Jonathan Eisenson on for Hamza. First off, Keith, congratulations on your career and best of luck with retirement and with your next endeavors. So, Ken, for you, so I believe some of the hyperscalers like Oracle are big customers and partners with Fortinet. So just curious, as you have Oracle and some of the other hyperscalers building out new data centers, just curious to what extent Fortinet is involved in securing these.
Thank you.
Ken Xie -- Chairman and Chief Executive Officer
Yeah. Thank you. It's a great question. So, Fortinet is the only company, we developed the secure ASIC processor is increasing the secure computing power quite a lot compared using general purpose CPU.
That's driving a lot of our growth into we call the internal segmentation within the data center hyperscale and all these things. So, we see a huge opportunity and not just the secure network in there, but also a lot of data center also related to AI. We also see a huge opportunity to drive the AI security, whether secure the infrastructure to self or secure the data or secure the access. So, there's a lot of opportunity.
I do believe that's the huge potential for growth because of a unique advantage using the for the ASIC.
Operator
Thank you, and we'll move on to our next question. Our next question comes from the line of Tal Liani with Bank of America. Your line is open. Please go ahead.
Tal Liani -- Analyst
It's an honor for me to ask a question after John, my ex-associate across the line. But I want to ask you two things. Number one is about billings. Why is billing weak and weak guidance? And that second question is product revenues outperformed so much this quarter, and that might be a cycle, refresh cycle, but the guidance for next quarter, I don't see outperformance.
So why is it just this quarter phenomenon and you don't carry the strength into the next few quarters? Thanks.
Keith Franklin Jensen -- Chief Financial Officer
Yes, Tal, I wasn't sure on your first question about billings, if you were asking about the fourth quarter or the first quarter guidance.
Tal Liani -- Analyst
I'm asking billing in general. So, billing for the fourth quarter was better, but billing for the first quarter is weaker. So why is the weakness in billing?
Keith Franklin Jensen -- Chief Financial Officer
Yes, I think I think the -- if you look at the fourth quarter, maybe we'll start there a little bit. As you recall, we talked last quarter about the fourth quarter guidance process, there was a lot of concern around eight quarters or probably the eight-figure deals and what we were going to get out of that, and we were being cautious in the guidance. That was logically rather a prudent approach where we got the upside was on those deals from $5 million to $10 million. And I would say the close rate and the opportunity there was probably $40 million to $50 million more than what I anticipated in the guidance setting process.
And you saw that same overperformance on the larger deals show itself in the product revenue line. And then also we saw in the product revenue line. Our significant growth in product revenue was in the mid-enterprise -- pardon me, the midsized firewalls and the large firewalls. And when you peel back on that onion, you start to see enterprise companies have actually started their purchasing of the refreshes that we talked about at the Analyst Day.
So, I think obviously, the information in the news about Q4 is very good. I think if you look at in Q1, whether it's billings or product revenue, probably just a little more caution there as we kind of got exposed to the tariffs here over the last week, and we saw the reaction and some of the concerns for us with more of a multinational footprint, particularly in Latin America and Canada, for example, the customer footprint, a little more exposure there. And then, of course, the direct impact of perhaps some disruption in the U.S. government where we do have a footprint also.
So maybe a little caution in that regard.
Ken Xie -- Chairman and Chief Executive Officer
Yes. The other problem may impact some of the buildings. We are more also driving the IPO, which a little bit different than before. It's more about building, but this is an IPO.
I probably would defer some building to the future, but we'll kind of secure the customer with the platform, the unified SASE approach. That's where the SASE and the SecOps tend to have a higher growth in the IPO than the building.
Operator
Thank you. One moment as we move on to our next question. Our next question is going to come from the line of Gabriela Borges with Goldman Sachs. Your line is open.
Please go ahead.
Gabriela Borges -- Analyst
Hey, good afternoon. Thanks for taking my questions. I would love to hear a little bit more on the refresh opportunity for this year. I know you've broken it out for us in product versus cross-sell in a couple of different ways.
I wanted to ask you specifically about the implications for subscription revenue as you see the hardware come up for renewal. And as you sell some of the networking components on the hardware side and to our installed base. So, either for Keith or maybe Christiane, how do you think about the implications for subscription, specifically as hardware comes up? Thank you.
Keith Franklin Jensen -- Chief Financial Officer
Christiane, do you want to jump in there?
Christiane Ohlgart -- Chief Accounting Officer
OK. I think at the Analyst Day, I explained a little bit that the existing hardware has subscriptions. In order to grow subscription revenue, we need to upsell and sell either more subscriptions with the same hardware or more services. So, we have put plans and incentives in place for our sellers and our channel partners to do so.
But that's kind of the prerequisite for us to grow our service revenues or accelerate the service revenues.
Ken Xie -- Chairman and Chief Executive Officer
Also, the new hires tend to be -- have more capacity to run additional function and better performance. And thus also enable additional service, including a lot of new service we developed in the FortiOS in the last few years as all the Unified SASE function and some other AI kind of based function. That gives the new opportunity and leverage new hardware.
Gabriela Borges -- Analyst
Thank you for the detail. Congrats on the quarter and congrats to Keith and Christiane as well.
Ken Xie -- Chairman and Chief Executive Officer
Thank you.
Operator
Thank you. One moment as we move to the next question. Our next question comes from the line of Brian Essex with J.P. Morgan.
Your line is open. Please go ahead.
Brian Essex -- Analyst
Good afternoon. Thank you for taking the question. JPMorgan. Keith, I thought when you started with key highlights for the quarter, your retirement would be up to the top.
But seriously, it's been a real pleasure working with you and best of luck on the retirement, well deserved, and Christiane looking forward to working with you. So, congratulations on the appointment as CFO. I guess the question I had was with regard to the billings guide for this next fiscal year. would love it if -- maybe Christiane, if I think you've done a lot of work on it, if you could unpack the assumptions behind that? How much is upgrade growth of SecOps and SASE and how much is product-related refresh cycle baked into that? And maybe if you could share an exit rate, that would be super helpful.
Christiane Ohlgart -- Chief Accounting Officer
So, in our billings and revenue guidance, of course, we have the two components, right? Product is what we said this year. Services is what we -- what goes on the balance sheet, mostly and about 15% from new services that we are selling this year. And our assumptions, of course, are, as we presented at the Analyst Day that we have a significant upsell component but we also are planning to -- with certain incentives for, again, our own sellers, as well as our channel partners to drive new logos. And from an exit rate perspective, were you looking at exit rate for services?
Brian Essex -- Analyst
I guess overall for billings. And then maybe if you can help us understand how much product revenue is baked into that. But really just trying to get a sense of the trajectory that you're baking into billings to kind of get to that full year billings guidance that you have.
Christiane Ohlgart -- Chief Accounting Officer
The product revenue growth, we assume is around 10% right now as we saw already a significant traction this year, but yes, that's the current running assumption.
Brian Essex -- Analyst
OK. That's helpful. And is that -- does that require like the exit rate in 4Q of like teens like high teens billings growth? Or are you expecting a more moderate build throughout the year?
Christiane Ohlgart -- Chief Accounting Officer
Right now, it's more moderate.
Brian Essex -- Analyst
OK, super helpful. Thank you so much and congrats.
Ken Xie -- Chairman and Chief Executive Officer
Thank you.
Operator
Thank you. One moment as we move on to our next question. Our next question comes from the line of Fatima Boolani with Citi. Your line is open.
Please go ahead.
Fatima Boolani -- Analyst
Good afternoon. Thank you for taking my questions and Keith, congratulations. I hope you very much have an enjoyable ride into the sunset. It's been terrific partnering with you.
I wanted to go back to some of the commentary you made on the tariff impact. I did want to dig into that a little bit. So, I think there is a significant amount of uncertainty from these tariffs. They're in flux.
There are some potential retaliatory policies being thrown around. So, I both wanted to dig into some of the demand comments you made and how far ranging those are and how they are being contemplated in guidance? And then also from a supply chain perspective, how is that influencing or potentially impacting your supply chain and ultimately COGS and gross margins. Thank you.
Christiane Ohlgart -- Chief Accounting Officer
Yes. As you pointed out, it's extremely dynamic time, if you will, and trying to understand where these may end up. I would say that for selling purposes for demand. We have a fairly significant footprint in both Latin America and Mexico, as well as Canada.
And over the weekend, when the tariffs were announced, there was a lot of activity here, and certainly, Sunday night and Monday morning to understand what the disruption would be more about those economies and their buying habits, if you will, of our products. And I think it's that type of reaction that we are focused on. I would also supplement that by a little more context. Our 40-authenticator product, I believe it is, is actually -- it's a very small product line, but it is manufactured in Canada, and we were looking at what the tariff impact would be like that.
And then by Monday night, all those things -- all bets are off. So, we're kind of chasing it a little bit. And we do have, similar to our sales leadership in Latin America raising their hand immediately and what they were seeing and being concerned about with Mexico. Our U.S.
federal team similarly raised their hand and said, if there aren't going to be employees of the federal government to sell to, it's going to be challenging. So, I just think we're acknowledging that it's a very dynamic situation right now, and let's try and not get too far out of our skis until we know more. On the other side, I think, in terms of tariffs coming into the country or the products Keep in mind that our pure U.S. business is around 25%, 26%, 27% of our total business.
So obviously that 30% -- probably 30% plus international would not be subject to the tariff schemes of the U.S. And I think there's obviously -- if we had to respond in some way, to the market. I think the tariffs would be broad brush and would affect not only ourselves in our U.S. business for that remaining 25%, 26%, but our competitors as well.
And I would expect that we would still, at this early stage, still have the pricing advantage that we currently have.
Fatima Boolani -- Analyst
Thank you, Christiane. Congratulations.
Operator
Thank you. One moment as we move on to our next question. Our next question comes from the line of Shaul Eyal with TD Cowen. Your line is open.
Please go ahead.
Shaul Eyal -- Analyst
Thank you so much for taking my question. Good afternoon. Congrats on the results. Congrats, Keith, and congrats, Christiane.
Ken, my question maybe builds a little bit on the prior question but touch us more specifically on your U.S. performance. This year, you had, I think, this quarter, the best quarterly performance in 2024, do you see that being sustained into 2025 given some of your prior investments? What are the plans specifically as it relates to U.S. sales operations? Thank you.
Ken Xie -- Chairman and Chief Executive Officer
Yeah, it's a great question. So, I think probably starting a little bit over one year ago, we're starting enhanced the U.S. enterprise sales. and also, more focused on like adding sales capacity and also kind of working closely with our channel partners to drive the growth, which both in the high con and also drive the program with the partner there.
So that's -- we see some pretty good results. And so, we do see there's a lot of room to grow in the U.S. And at the same time, we have a huge advantage on the resource on the facility on the people here in the U.S. and Canada that continue drive the future growth.
So that's where we see the U.S. could be the fast-growing region in the next few years.
Shaul Eyal -- Analyst
Thank you so much.
Ken Xie -- Chairman and Chief Executive Officer
Thank you.
Operator
Thank you. One moment as we move on to our next question. Our next question is going to come from the line of Rob Owens with Piper Sandler Company. Your line is open.
Please go ahead.
Rob Owens -- Analyst
Great. Thanks for taking my question. I was hoping you could expand a little bit just on the Linksys relationship and what you hope it brings. And I know, Ken, you did outline some expectations relative to revenue and billings, but just strategically where it positions you better? Thanks.
Ken Xie -- Chairman and Chief Executive Officer
Yeah. Linksys, actually we acquired about 51% of shares about three years ago. And then we keep shaping the company to more line up with our own kind of secure networking strategy. But also, this is all kind of the new market, we feel Fortinet is the only player that can play in the consumer home-based network security because we have this technology like ASIC, we have all this Unified SASE together with the Linksys consumer and also the huge user base, which they have 25 million active users and has been shipping almost 250 million devices in the last almost 40 years.So, it's a leading brand.
And with this customer base with our technology and the combined resources, we feel we can really drive the new market for consumers to supporting work from home and also to cover some SMB space, we see pretty fast growth. So that's the strategy, but that also probably will take some time to continue kind of develop all this technology market together, but we do feel this could be a huge potential in the next 5 to 10 years for the company growth.
Operator
Thank you and we'll move on to our next question. Our next question comes from the line of Eric Heath with KeyBanc. Your line is open. Please go ahead.
Eric Heath -- Analyst
Great, thanks for taking the question here. And Keith, congrats as well. So, Keith and Christiane, I wanted to understand a little bit just ahead of the refresh opportunity that's starting in the second half. How should we be thinking about inventory levels in anticipation of that demand.
And then secondly, maybe to follow on to Brian's earlier question. Just the assumptions embedded in the product guidance specifically from the end of service refresh, are you assuming half of that $400 million to $450 million opportunity happens in 2025? Thanks.
Keith Franklin Jensen -- Chief Financial Officer
Yes. I'll cover off the inventory question a little bit, and then maybe Christiane can come back over the top and talk a little bit more about the model for 2025. And I don't know that we will assign specific dollar amounts to each individual item in that in any event. But Ken and I've been at this for a long time.
He likes to see an inventory turn to two. I like to see inventory turns of five or six. I lose constantly on the inventory turns. We've gotten -- we've gone through the supply chain cycle here, you saw the inventory turns.
We did very well with those storing inventory, if you will, on our balance sheet as we got into COVID and supply chain crisis and it really helps fuel the Supercycle for us on our income statement. And with that in mind, I think a healthy number for us. I'd have to agree with Ken now is probably in the range of 2x with the turns. And I would imagine that you could expect us to target that each quarter in terms of our inventory balances.
Christiane?
Christiane Ohlgart -- Chief Accounting Officer
Yes, on the linearity of the product revenue assumptions, while there is definitely a compelling reason to refresh in the second half year because you can only renew for one year. we've seen refresh activity happen already, especially for large customers. And we will try to accelerate the upgrade cycle as much as we can. So, we've assumed that there is a more gradual than kind of spiky upgrade part.
Thank you.
Operator
Thank you and one moment as we move on to our next question. Our next question comes from the line of Saket Kalia with Barclays. Your line is open. Please go ahead.
Saket Kalia -- Analyst
OK, great. Hey, guys, thanks for taking my questions here. And I tip my cap to both of you on your respective exciting next steps. So very clear numbers and a lot of helpful questions.
Keith and Christian, maybe I'll ask just a couple of housekeeping questions, if I may. First, can you just remind us -- I think you touched on it a little bit. Can you remind us how big LatAm and Canada are just in terms of percentage of billings. And then maybe on top of that, can you just remind me of the 12% growth that we're guiding to roughly in 2025, how much of that is organic versus inorganic?
Christiane Ohlgart -- Chief Accounting Officer
To your first question, LatAm and Canada are about 15% of total business. And on the organic growth number, we expect about one point inorganic.
Saket Kalia -- Analyst
Very helpful. Thanks, guys.
Operator
Thank you. One moment as we move on to our next question. Our next question comes from the line of Adam Borg with Stifel. Your line is open.
Please go ahead.
Unknown speaker -- Stifel Financial Corp. -- Analyst
Hey, guys. You've got Max down here for Adam at Stifel. Thanks for taking the question. Over the last few quarters, we've talked about SASE and SecOps billings coming primarily from existing customers.
So, as we look out into '25, just wondering what the opportunity is for SASE and SecOps to become a more meaningful contributor to new logos? And do you expect that to kind of remain as primarily an upsell motion?
Ken Xie -- Chairman and Chief Executive Officer
I think we do have a huge installation base on the firewall and SD-WAN. I still feel grow upgrade from that to probably will come most of the new Unified SASE. And that's also more easy sell for the sales force and also for the partner. I believe in the last few quarters, probably over 90% come from these customers, which are already all at firewall also SD-WAN customer, which does give us also more advantage compared to all these SASE only player.
So that's where -- and that's also the reason is also because we have the single OS. I have all this networking security result is SD-WAN and also all the SASE function, the same way. It's very easy upgrade. On the other side, we do have to see a lot of new customers and especially some big enterprise.
Some of them do have issue with some other SASE players, and we do have a lot of advantage on the better function, better integration, single OS solution and much better performance and pricing, like I mentioned, probably 3x to 5x more price advantage and plus our own kind of infrastructure supporting this kind of lower cost, better margin. And the same time, integrate function together is more easy to manage and better protection. So that's the advantage we have. That's why we're also pretty confident.
We believe we not only were leading the No. 1 player in the next-gen firewall and the SD-WAN, we also give us some time. We're also leading unified sort player in the space.
Keith Franklin Jensen -- Chief Financial Officer
Yes. And I think Ken's spot on in terms of the factors that -- and I'll build on one of those, which is removing -- reducing complexity and reducing costs and making things simpler. I was really impressed with the first deal that I talked about in the earnings script here when I talked to the sales team, which was a pure white space account that started off as a competitive firewall displacement. And we know we're really good at that, and we know how to do that.
But then to see them consult and collaborate with the customer and make it not only an SD-WAN deal, which made a ton of sense, but also to get them in the boat on the SASE deal. And I think that speaks to -- we won a very good sales team that brought that to the table for us. But the evolution of the maturity that you're seeing in our own organization as we get more experience in our fleet and our ability to branch out and sell into those organizations that are focused on a consolidation play, removing complexity and controlling cost.
Ken Xie -- Chairman and Chief Executive Officer
That also will benefit from a lot of a long-term investment like in the single OS in the hardware and also in the ASIC. We are the only ASIC designer in the whole space. and a lot of new designs will drive the new SASE function will keep give us a much better performance, lower cost, lower power consumption, and also the sovereign SASE fee for service provider for enterprise for data center, we also see a lot of growth potential. That's really the unique advantage Fortinet has.
Operator
Thank you and we'll move on to our next question. Our next question comes from the line of Shrenik Kothari with Baird. Your line is open. Please go ahead.
Shrenik Kothari -- Analyst
Yeah, thanks for taking my question. Just really solid Unified SASE growth rates you guys are seeing increased penetration among larger enterprises which in the earlier commentary was still building momentum. So just curious, can help provide an update on specific incentives, which are tied to they're upselling SASE ops and how these incentives are impacting overall proactive metrics, deal conversion? And then I had a follow-up question as well.
Ken Xie -- Chairman and Chief Executive Officer
Yes, really, we do want to accelerate the training to both our sales team, the technical team, and also a partner. And it's -- but they do see -- the customer definitely sees some of the long-term benefit of using a single OS to gradually adding more function and adding more security and easily upgrade to the next kind of security function they needed. And on the other side, I think that we also need to keep hiring and keeping a sales capacity and at the same time, provide better training. On the other side, we see the feedback already from customer partner.
They do see the upgrade of SASE is much easier compared to this new SASE approach and the much shorter sales cycle. And you can see since like -- we only launch our own SASE approach a little bit over one year. And you can see the ramp-up is rather quick probably the fast-growing in the SASE space right now. So, we do see a lot of great potential going forward.
Operator
Thank you and one moment as we move on to our next question. Our next question comes from the line of Junaid Siddiqui with Truist Securities. Your line is open. Please go ahead.
Junaid Siddiqui -- Truist Securities -- Analyst
Great, thank you for taking my question. Keith and Christiane congrats to both of you. Keith, you mentioned SMB being one of the top-performing customer segments, which is a bit different from what we hear from some of the other vendors I was just curious what is underpinning that demand? And what are you seeing that others are not? Thank you.
Keith Franklin Jensen -- Chief Financial Officer
Well, I think the channel program at Fortinet is probably fairly mature. I mean, Ken has been doing it for a long, long time. I don't think we're scrambling to find channel partners, if you will. I would also give a lot of credit to Christiane and what she's done in her year here, which is really focused on the channel and getting to more senior levels with the channel leadership to understand what's important to them and how to structure incentives that are tailored to what the channel is trying to accomplish.
There's just much more collaboration with channel partners today than I've ever seen before here. And I think these -- we had some fairly specific and targeted incentive programs in the fourth quarter that Christiane helped develop. And I think those were, as you see in the numbers, the new logos and 6,900 and the mix of the business, extremely successful.
Ken Xie -- Chairman and Chief Executive Officer
Yes, I also see we have probably the best product because none of our competitors, large or small, has this technology single OS with so many is almost 30 functions integrated in the same single OS and with about half of the function about 14, 15 using ASIC, that's give us huge performance and functional advantage than any other competitor because the SMB, like the three model we announced today, they run the same OS compared to some other big box, big appliance there. And that's where the SMB and even the long term, the home users see some huge advantage. You've seen the same OS, and they can kind of weather connect to the enterprise so they can they can connect to the cloud and also the labor this new Unified SASE approach. So that's where we feel is a technology pro advantage gave us huge kind of unique benefit to our customers and the customer eventually can be the home user consumer space, which we feel is because so far, even in the U.S.
and Europe, the developed country, the SMB still had only single digit of SMB customer has any network security to protect their network in there. So, we do see there's a lot of growth potential. But how to address this technology need to be easy to deploy, easy to use, easy to support and make AI and all this, that's where we kind of invest quite a long time, and we do see is kind of a long-term benefit of this long-term investment and also a huge potential going forward.
Operator
Thank you and one moment as we move on to our next question. Our next question comes from the line of Joseph Gallo with Jefferies. Your line is open. Please go ahead.
Joseph Gallo -- Analyst
Hey, guys, thanks for the question. Keith, congrats on the much-deserved retirement. And congrats to Christiane, look forward to working more with you. It was great to hear about the early end-of-life refresh demand.
In those early renewals, how has the average deal size increased versus four years ago? I'm just trying to understand how you're thinking about the size of the cross-sell opportunity versus that $450 million product refresh? Thanks.
Keith Franklin Jensen -- Chief Financial Officer
Yes. I think I tried to make a point that what we've seen, and I guess it kind of makes sense is that the larger enterprises are probably moving first. We expect that the SMBs may move a little bit later on the timeline. they probably have less advanced purchasing departments and maybe less regulatory pressures and things of that nature.
There's probably a lot of reasons for it. I think what you see in our large enterprises, historically is they often have a deployment schedule. They may not necessarily take all the equipment at one point in time, but rather take a certain amount each quarter, maybe nothing in one quarter and more in the third quarter. And it was that same buying behavior patterns that I think we started to see in the fourth quarter, we are looking back at some of these more regulated industries, also some technology companies, and we could see the swapping out of the mid-major products that are being end of life and then taking on new products.
And we talked to the account person about, yes, they are on that runway, and they will continue doing that now over the next several quarters.
Christiane Ohlgart -- Chief Accounting Officer
And let me add to what Keith just said regarding your question of average deal size. So, as we have a lot of large customers that have enterprise agreements, they pretty much have an ongoing purchasing habit of replacement devices that they build out during the EA. So, you don't necessarily see creeping up larger deals because they negotiate at a certain point in time what they need for the next five years, and then they buy as they are ready to upgrade.
Operator
Thank you and one moment as we move on to our next question. Our next question comes from the line of Ittai Kidron with Oppenheimer and Co. Your line is open. Please go ahead.
Ittai Kidron -- Analyst
Thanks and congrats as well for both of you, Keith and Christiane. Good luck and enjoy retirement, Keith, you earned it. A couple of questions for me. Just again on this upgrade cycle.
If you know the devices and you can ping them and you know exactly where they are and when they get retired for the vast majority. Can you just be a little bit more specific on what was the contribution of this upgrade to revenue this past quarter? And what is the exact dollar contribution you expect from the upgrade in your '25 guide? And the second question is for Ken on SASE. Great to see the progress in adoption over there. Can you comment though, of how much of the adoption with the large enterprise is against brownfield displacement of all SAS solutions or walking into a vacuum.
Would love to understand how much of your footprint in your opinion as something that you need to displace versus you're stepping into a vacuum. Thank you.
Keith Franklin Jensen -- Chief Financial Officer
Yes. I think it's a great question. And keep in mind, with the two-tier distribution model. We sell to distributors and sell to reseller to sell to end users.
And oftentimes, it's also SMB. The quality of the data about the end user gets better and better, the closer you get to the end user, which would be the reseller. And that's why you heard a reference in the script about the importance of working with them on data gathering. There's a bit of an honor system when they registered the devices.
It may be more intuitive to us that, of course, we get a device register like our phone or something like that, but that's not what happens in practice, particularly in the SMB. And really, there's a heavy reliance there on the channel to spend time and energy if you want to get good reporting and tracking on that. So, we'll get better at it as we go, and that's part of working closely with the channel partners. It is "easier" with the enterprises because we can talk to the -- to our sales rep is working in a large enterprise and understand the account plans and what they're seeing, but you're still only getting a partial set of information I think the reporting and the information will get more mature as we go along.
It's moving pretty quickly right now on us in terms of how we're developing it. Anyways.
Ken Xie -- Chairman and Chief Executive Officer
For your second question, actually, you can refer to the presentation, Slide No. 5. So, they do give some deeper penetration rate. I think for SASE, it's around 10%, an increase of 2 points from like two months ago.
And then also large enterprise probably about 70%. So that's where we see we are leading in the firewall manager and firewall market. And then that actually drives a lot of our SD-WAN growth. And then also after SD-WAN, the SASE will be the next growth while keeping -- helping customers build better security infrastructure.
Keith Franklin Jensen -- Chief Financial Officer
And in terms of your question, whether it's brownfield or not, we are seeing some of our biggest SASE deals as displacements of either legacy VPN providers or legacy SASE providers.
Ittai Kidron -- Analyst
I appreciate it. Thank you.
Operator
Thank you, and I would now like to turn the conference back over to Aaron Ovadia for closing remarks.
Aaron Ovadia -- Director of Investor Relations
Thank you. I'd like to thank everyone for joining today's call. We will be attending an investor conference hosted by Morgan Stanley during the first quarter. The fireside chat webcast link will be posted on the events and presentations section of Fortinet's investor relations website.
If you have any follow-up questions, please feel free to contact me. Have a great rest of your day.
Operator
[Operator signoff]
Duration: 0 minutes
Aaron Ovadia -- Director of Investor Relations
Ken Xie -- Chairman and Chief Executive Officer
Keith Franklin Jensen -- Chief Financial Officer
Jon Eisenson -- Analyst
Tal Liani -- Analyst
Keith Jensen -- Chief Financial Officer
Gabriela Borges -- Analyst
Christiane Ohlgart -- Chief Accounting Officer
Brian Essex -- Analyst
Fatima Boolani -- Analyst
Shaul Eyal -- Analyst
Rob Owens -- Analyst
Eric Heath -- Analyst
Saket Kalia -- Analyst
Unknown speaker -- Stifel Financial Corp. -- Analyst
Shrenik Kothari -- Analyst
Junaid Siddiqui -- Truist Securities -- Analyst
Joseph Gallo -- Analyst
Ittai Kidron -- Analyst
More FTNT analysis
All earnings call transcripts
This article is a transcript of this conference call produced for The Motley Fool. While we strive for our Foolish Best, there may be errors, omissions, or inaccuracies in this transcript. As with all our articles, The Motley Fool does not assume any responsibility for your use of this content, and we strongly encourage you to do your own research, including listening to the call yourself and reading the company's SEC filings. Please see our Terms and Conditions for additional details, including our Obligatory Capitalized Disclaimers of Liability.
The Motley Fool has positions in and recommends Fortinet. The Motley Fool has a disclosure policy.