F5 NETWORKS ANALYST AND INVESTOR MEETING

F5 NETWORKS ANALYST AND INVESTOR MEETING NOVEMBER 15, 2012

John McAdam President, Chief Executive Officer, and Director

WELCOME/INTRODUCTION

8:00 Welcome/Introduction John McAdam, President & CEO

8:15 Product Overview & Market Opportunity

Dan Matte, EVP Marketing & Business Development

8:45 F5’s Security Solutions Manny Rivelo, EVP Security & Strategic Solutions

9:10 BREAK

9:20 F5’s Service Provider Solutions

Manny Rivelo, EVP Security & Strategic Solutions

9:40 Technology Update / Roadmap

Karl Triebes, EVP Product Development & Chief Technical Officer

10:25 Sales Update Dave Feringa, EVP Worldwide Sales

10:45 BREAK

10:55 Services Update Julian Eames, EVP Business Operations

11:15 Business Development / Strategic Partnerships

Jim Ritchings, SVP Business Development

11:35 Business Model Overview / Financial Outlook

Andy Reinland, EVP & Chief Financial Officer

11:55 Q&A

12:30 ADJOURN

Agenda

Dan Matte Executive Vice President of Marketing and Business Development

PRODUCT OVERVIEW AND MARKET OPPORTUNITY

185 billion

mobile app

downloads

by 2014

50 billion connected

devices by 2020

Cloud Computing is in the Top 3

concerns for CIO priority in 2012

More delivery mechanisms

71% of all work will be mobile

or web-based by 2020

More challenges

impacting IT

infrastructure

More users and

more choices

F5 MAKES THE CONNECTED WORLD RUN BETTER

Global Data Center IP Traffic Growth

Source: Cisco Global Cloud Index

2/3 Data Center Workloads Cloud Based by 2016


3/4 of Data Center Traffic within Data Center


The World is Moving Our Way

Gartner: ½ of native apps delivered as web apps by 2015

Explosion of Devices

Harvest Radio

Wave Energy

No batteries

No external power

Sensor

IP Traffic

Platform Well Positioned for the Future

TMOS circa 2004 Flow-Based Intelligence

Packet

Based

Flow

Based

2004

React to a Single Communication, One Direction

React to a Real Time, Two-Way Conversation

Translate Between Parties

TMOS

Traditional Application Delivery Challenges

Firewall ADC

App

servers

Storage

Clients

Intelligent Cost

of Scale

Traditional Application Delivery Challenges

ADCs

App

servers

Storage

SaaS

Cloud

Firewall

More Endpoints

More Delivery Options

More Applications

Clients

Solution: An Intelligent Services Platform

Virtual

Physical

Cloud

Storage An Intelligent Services Platform

connects any user, anywhere, from

any device to the best application

resources, independent of

infrastructure.

Anywhere, any service,

any device Intelligent Dynamic, agile,

adaptive

Clients

F5 Delivers an Intelligent Services Platform An integrated device with strategic awareness

• Understands and adapts

application resources based on

user context and expected

application behavior

• Delivers full application state

visibility and complete session

inspection

• Provides total control of all user

and application traffic in and out

of the data center

APPLICATION AWARENESS

• Provides real-time traffic

management decisions based on

application performance

• Assists with capacity planning

and performance tuning

• Delivers true application delivery

optimization without the need to

rewrite applications

RESOURCES AWARENESS

• Proxies and inspects 100% of

inbound

user traffic

• Determines user environment such

as device type and location

• Applies application delivery policies

based on real-time business needs

USER AWARENESS

The Best Platform on the Planet Intelligent Services Platform

iRules iControl iApps

Hardware Software

TMOS

Secure

Available

Fast

DevCentral

Unmatched Programmability: Built in

customization with an extensible and

programmable architecture (iRules, iApps

& iControls)

Unified Services: Delivers dynamic

application delivery services from the

datacenter to the device

App Fluency and Scale: Adapts to

shifting requirements of performance and

application and user needs with Platforms

and Traffic Management OS

F5’s Focus Areas

Cloud

Services

Security

Services

ADC

Services

Service

Provider

Services

F5’s Intelligent Services Platform Evolution 2011

Enterprise

Manager™

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

iRules®, iApps®, and iControl®

TMOS®

Security

ADC

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforcement

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access Policy

Manager

(APM)

TMOS® Service Provider

Security

ADC


BIG-IQ™

BIG-IQ

Security™ BIG-IQ

EM™



TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …


Inject it

Rent it

Build it

Cloud Choices

Phases of Virtualization Journey

Business Focus Business Production IT Production

Infrastructure Focus Application Focus Business Focus

Low

Governance

High

Governance

Enterprise

Hybrid Cloud Clo

ud

Virtu

aliz

ation IT

Efficiency Business

Agility

Virtualization Adoption

41% 40%

19%

Today

Perc

enta

ge A

dop

tion

19%

47%

33%

In Two Years

IT Production

Business Production

ITaaS

Phases of Virtualization Journey

Business Focus Business Production IT Production

Infrastructure Focus Application Focus Business Focus

Low

Governance

High

Governance

Enterprise

Hybrid Cloud Clo

ud

Virtu

aliz

ation IT

Efficiency Business

Agility

Barriers Remain

Software Defined Networks

• L2/3 Centric

• Competing Approaches

• Needs Application Awareness

Emerging Opportunity for F5

F5 Delivers Intelligence at All Levels

Control Plane

Data Plane

Management Plane

iRules

iApp

iControl

Application

Awareness

Extending the Intelligent Services Platform TMOS programmability

Dev Central: A community of 105,000+ developers in 191

countries publishing and engaging in real-time app delivery

solutions. You never have to wait for us.

Over 5,500 management API calls

84% faster deploy time

90% accuracy of configuration

application traffic

management

commands

79% of F5 Customers deploy iRules

on production

BIG-IP devices

contain ~600

iRules iApps iControl

Total Addressable Market - ADN

Total Addressable Market

Competitive Leadership 2Q12 Gartner ADC Market Share

Cisco

11.4%

F5 NETWORKS

48.2%

Others

13.4%

Radware

7.5%

Citrix

14.3%

A10

5.3%

Gartner, Inc. Market Share: Application Acceleration Equipment, Worldwide, 2QCY12, Joe Skorupa, Nhat Pham, September 2012

Platform to Capture Powerful Trends

Cloud Traffic Web

Mobile

F5’S SECURITY SOLUTIONS

Manny Rivelo Executive Vice President of Security and Service Provider Solutions

UNIFIED Security Platform

uni·fy - transitive verb \ y̍ü-nə- f̍ī\

to make into a unit or a coherent whole

Macro Industry Trends

Users Resources

Anywhere

Any service

Any device

Dynamic

Agile

Adaptive

Key IT Security Trends

Intelligent

Services

Platform

Users Resources

Anywhere

Any service

Any device

Dynamic

Agile

Adaptive

Bring Your Own Device

BYOD - 95% of workers use

at least one self-purchased

device for work

MOBILE APPS - More than

130M enterprise customers

using mobile applications

by 2014


Intelligent

Services

Platform

Users Resources

Anywhere

Any service

Any device

Dynamic

Agile

Adaptive


Web 2.0

69% of all Americans say they use

web apps

71% of experts predict most work will be done

via web-based or mobile apps by 2020


Intelligent

Services

Platform

Users Resources

Anywhere

Any service

Any device

Dynamic

Agile

Adaptive


Web 2.0

Disappearing Perimeter

• 80% of net new apps will target the cloud

• Over 72% of IT decision makers cited that they have used

or will use cloud services in the next year


Intelligent

Services

Platform

Users Resources

Anywhere

Any service

Any device

Dynamic

Agile

Adaptive


Web 2.0

Disappearing Perimeter

Evolving Threat

Landscape

Increasingly sophisticated and targeted

attacks:

• Botnets and server malware

• Hackers and hacktivism

• State-sponsored espionage

Evolving Security Threat Landscape

spear phishing

redirected traffic

DNS malformed packet

smurf attack

syn flood

slowloris

web scraping

malware

URL tampering

brute force

SSL renegotiation CSRF

recursive GET cookie tampering

CVE

DNS amplification

XSS

DNS Cache Poisoning Identity Extraction

Trojans

ICMP Flood

parameter tampering

social engineering

SQL Injection

UDP flood privilege escalations

HashDos

HTTP

fragmentation

excessive

GET/POST

key loggers

slowPost

sockstress

attack

ping of death

Phishing

DNS

Amplification

Enterprise Security requires…

Intelligent

Services

Platform

Users Resources

Anywhere

Any service

Any device

Dynamic

Agile

Adaptive

Access to applications and data from anywhere

and any device

Protecting the applications wherever they reside

F5’s Security Evolution

Point Security Services and Products

• Firewall LB and scaling

• SSL offload

• FirePass

• TrafficShield

Full Proxy Security

= Strongest Security

Architecture

Network

Session

Application

Web Application

Physical

Client / Server

Network

Session

Application

Web Application

Physical

Client / Server



Integrated Security Solutions


• SSL offload

• FirePass

• Traffic Shield

1. Access to applications

2. Security for applications

3. Technology Alliance

Program

Access Use Cases

Enable Safe

BYOD

Accelerated

Remote

Access

Enhanced Web

Access

Management

Streamline

Exchange

Simplified

VDI

Consolidated

App

Authentication

VIEW XEN

RDP

Security Use Cases

Protect

IP

Assess and

Mitigate App

Threats

Minimize

Vulnerability

Exposure

Protect the

Data Center

Guard

Against

DDoS

Inspect

SSL

SSL

Technology Alliance Program Multi-Factor

Authentication DAST

Certificates Encryption

Endpoint Inspect / AV

Web Access

Management

Anti-Fraud / Secure Browser DB Firewall

DNS Security and SBS

FIPS/HSM Security

Mobile Device Management

Mobile OS Web and

SaaS Security

Security Change Management SIEM

../../../../Local Settings/Temporary Internet Files/Local Settings/My Documents/Departments/

../../../../Local Settings/Temporary Internet Files/Local Settings/My Documents/Departments/

http://www.digitalenvoy.com/index.html

Industry Certifications

EAL2+

EAL4+ (in process)

Built for Intelligence, Speed, and Scale

Users

Concurrent

user sessions

100K Concurrent

logins

1,500/sec

Throughput

320 Gbps Concurrent

connections

144 million

Connections

per second

5.6 million

SSL TPS (2K keys)

120K/sec

DNS query response

6 million/s

Resources

Performance and Scale Throughput Connections Per Second

Sessions Footprint (144M Concurrent Connections)

F5 (VIPRION

4480)

Juniper

(SRX 5800)

Cisco

(ASA 5585-X)

Check Point

(61000) F5 (VIPRION

4480)

Juniper

(SRX 5800)

Cisco

(ASA 5585-X)

Check Point

(61000)

0

50

100

150

200

250

300

350

GB

PS

0

100

200

Millio

ns

0

1

2

3

4

5

6

7

Millio

ns

R

ack U

nit

s

0

100

200

F5 (VIPRION

4480)

Juniper

(SRX 5800)

Cisco

(ASA 5585-X)

Check Point

(61000) F5 (VIPRION

4480)

Juniper

(SRX 5800)

Cisco

(ASA 5585-X)

Check Point

(61000)

2x 14x

22x 10x

Key Win

1. High Availability: 2 Data Centers

2. Performance: 40 Gb from 2 Gb per DC

3. Network Firewall

4. Mitigate/Fix Application Vulnerabilities

5. TCO

• $900K for upgrading their Layer 3-4 FWs

to support performance requirements

• No app vulnerability mitigation

• No global load balancing

• Integrated platform $730K

• Layer 3-7 firewall – full mitigation

• Global load balance/DNS

Requirements



Integrated Security Solutions

Unified Security Platform


• SSL offload

• FirePass

• TrafficShield

1. Access to applications

2. Security for applications

3. Technology Alliance

Program

Consolidating intelligence at

key control points from the

endpoints to the data

center/cloud/application:

1. App delivery firewall

2. Centralized policy mgmt

3. Mobile app mgmt

4. Outbound services

5. Hybrid services

Unified Security Modules

iRules, iApps, and iControl

TMOS

BIG-IP

Advanced

Firewall

Manager

(AFM)

BIG-IP

Application

Security

Manager

(ASM)

BIG-IP

Global

Traffic

Manager

(GTM)

BIG-IP

Local

Traffic

Manager

(LTM)

BIG-IP

Carrier

Grade NAT

(CGNAT)

BIG-IP

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP

WAN Opt

Manager

(WOM)

BIG-IP

Web-

Accelerator

(WA)

BIG-IP

Access

Policy

Manager

(APM)

BIG-IP

Cloud

Connector

(CC)

BIG-IP

SDN

Gateway

(SDNG)

BIG-IP

Mobile App

Manger

(MAM)

BIG-IP

Modules

BIG-IQ

Security

BIG-IQ

Cloud

BIG-IQ

Modules

BIG-IQ

BIG-IQ

EM …

Introducing the World’s First Application Delivery Firewall Bringing an application-centric view to firewall security

• Full Proxy – Visibility and Control

• #1 ADC – Application Fluency

• Extensibility

One Platform

ICSA-Certified

Firewall

Application

Delivery

Controller

Application

Security

Access

Control

DDoS

Mitigation

SSL

Inspection

DNS

Security

BIF

UR

CA

TIO

N O

F F

IRE

WA

LL

S

“Next Generation” Firewall

Characteristics

• Outbound user inspection

• UserID and AppID

• Who is doing what?

• 1K users to 10K websites

• Broad but shallow

Corporate (Users)

F5 Application Delivery Firewall Solution

Internet Data Center (Servers)

Characteristics

• Inbound application protection

• Application delivery focus

• 1M users to 100 apps

• Narrow but deep

• 12 protocols (HTTP, SSL, etc.)

Using the Right Tool

BIF

UR

CA

TIO

N O

F F

IRE

WA

LL

S

“Next Generation” Firewall

Characteristics

• Outbound user inspection

• UserID and AppID

• Who is doing what?

• 1K users to 10K web sites

• Broad but shallow

Corporate (users)

F5 Application Delivery Firewall Solution

Internet Datacenter (servers)

Characteristics

• Inbound application protection

• Application delivery focus

• 1M users to 100 apps

• Narrow but deep

• 12 protocols (HTTP, SSL, etc.)

Using the Right Tool

Secures users when

they are on the

corporate network

Secures apps wherever

they live

BIG-IQ Security

MDM: “Manage” the device

Mobile Application Manager (MAM)

• Imposes controls over user’s

personal device and

experience

• Makes everything on the

device an enterprise problem

BYOD 1.0

BYOD 2.0

• Preserving the user experience

• Securing / controlling enterprise

data only

Access: “Connect” the device

“Manage” enterprise data and apps

“Connect” enterprise data and apps

Today

Up Next

MAM Components

F5 Mobile App Manager

Device

Management

Mobile App

Manager

Enterprise

App Store

App Store

Secure PIM

Connect

Secure

Browser

Browser

App

Wrapper Reporting

F5 Mobile App

Manager Workspace F5 Mobile App Manager BI

Outbound Security Services

Identity bridging across

corporate and SaaS

resources

• SAML 2.0 services

• SSO

Outbound Internet traffic

visibility and control

• Forward proxy

• Secure Web Gateway

AAA

Server

SSL Forward

Proxy

Internet

SAML IdP

Secure Web

Gateway

SSO and Federation

SAML SP

Hybrid Security Services

Hybrid Private Cloud

BIG-IQ

Hypervisor

SDN Protocols

VXLAN

NVGRE

Full proxy

Industry-leading services

Security “context”

Scale and performance

Simplifying the infrastructure

Extensible/programmable

Unified Security Platform Advantages

F5’S SERVICE PROVIDER SOLUTIONS

Manny Rivelo Executive Vice President of Security and Service Provider Solutions

Intelligent Mobile Broadband

Mobile Operator Dynamics

Sustain Margins / CapEx Squeeze

Identifying New Services

Entering New Geographies

Optimizing Network

Automating Operations

Improving Customer Service

New network expansion /

investment to fight competition

Differentiating with speed to

market and driving top line

Unlimited data plans and smart

device usage are filling network

pipes and destroying profits

To be best experience

operator and know

their customer better

and more intimately

Cloudifying operations to

streamline operations

New acquisitions /

partnerships / licenses

$

Time

TODAY

Current Economic Model Similar theme across the globe

Revenue

Network Costs

Flattening ARPU/AMPU

• Declining Voice/SMS revenue

• OTT substitution pressure

Increasing Network Costs

• Rich media explosion

• Complexity: Proliferation of devices/services

• Non-scalable network appliance approach

• Signaling growth and security threat

$

Time

TODAY

New Approach Is Needed

New Revenue

Network Costs

Mobile Internet 3.0

2010 Service Mix $835B* Evolving Service Mix $1.5T++*

SMS

Voice

Other

SMS Voice

Other

• Games

• Music

• Advertising

• Gambling

• Broadcast TV

• Payments

• Location-Based

Services

• Banking,

Commerce

• Healthcare

*Source: Chetan Sharma consulting

2012 forecast of $1T with data representing 29% of mix

Business Model

Transformation

1

Network

Transformation

Mobile Internet 3.0 Enhance ARPU/AMPU via service innovation

Today’s Mobile Network

Dedicated Network Features

Mo

bile

Vo

ice

(2

G)

SM

S/M

MS

Mo

bile

Da

ta

Mo

bile

Vid

eo

IMS

Ba

sed

Se

rvic

es

Op

en

Ga

rde

n S

erv

ice

s

Service Ecosystem

Creates Service Components

Content/Apps Providers

Developer Community

NSPs

Device OEMs

“The Next Generation Mobile Network”

Services Elements in Mobile Cloud

Signaling Elements (Diameter Based)

Access/Transport Fabric

2

Mobile Internet 3.0

App Store Explosion

OTT applications are

growing exponentially

New Devices

Signaling growth

and congestion

Bandwidth Hungry

Applications…video

Three Dimensional

Scaling and Security

3

Mobile Internet 3.0 EQUATION

Intelligent Services Platform

Foundation designed for

optimizing, monetizing, and

securing all 3 dimensions

Available

Security

Scale

Cloud-Enabled

Programmable






Available

Security

Scale

Cloud-enabled

Programmable

Ecosystem Innovation

Partner solutions extend the

possibilities

Simple

Open






Available

Security

Scale

Cloud-Enabled

Programmable

Ecosystem Innovation

Mobile Internet 3.0

Partner solutions extend the

possibilities

Accelerating innovation

and driving …

Simple

Open

Economics

Enablement

Experience

F5’s Service Provider Evolution

Traffic Management

• Drive technologies

through sales, channels,

and partnerships

• Leverage CONTEXT

aware product set to

enter adjacent

technology areas

iRules Examples

WAP Gateway

(in Forward Proxy Mode)

Handsets mixed

in either

Transparent or

Forward Proxy

Mode, using the

same APN

Changing

Worlds

system

GGSN

VAS Internet

(2)

iRule will capture and re-write the

transparent proxy traffics into forward

proxy ones, and then forward to one (or

more) WAP Gateway (s), or either

bypass WAP G/W, as for Java Finance.

iRule also check whether it is a REAL

HTTP or not, just send to Internet

directly if it is something Changing

Worlds systems do not support.

WAP GW Bypass Solution

Interface Gn

RADIUS & HTTP Load Balancing + Bypass

CE

DP

I

LB CSG

CSG2 FWLB CSG

FW Internet

F5 BIG-IP

GGSN

Router Router

FW1

WAP Gw DNS

Proxy RADIUS

Router Router

FW1

WAP Gw DNS

Proxy RADIUS

PE

MAN

BIG-IPLTM

DNS attack

Hacker

IDS

2. Inspect

DNS DOS/DDOS Prevention

1. Mirror

3. Notify

3. Block

Ability to intercept,

inspect, modify, and

control packets,

sessions, and

content


Traffic Management



and partnerships



enter adjacent

technology areas

Productize Adjacent Technologies

1. Intelligent traffic and

subscriber mgmt – PEM

2. Carrier Grade NAT

3. Security

4. Signaling Delivery

Controller and DNS

5. Cloud/Virtual Editions

F5’s Intelligent Services Platform


TMOS®

BIG-IP

Advanced

Firewall

Manager

(AFM)

BIG-IP

Application

Security

Manager

(ASM)

BIG-IP

Global

Traffic

Manager

(GTM)

BIG-IP

Local

Traffic

Manager

(LTM)

BIG-IP

Carrier

Grade

NAT

(CGNAT)

BIG-IP

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP

WAN Opt

Manager

(WOM)

BIG-IP

Web-

Accelerator

(WA)

BIG-IP

Access

Policy

Manager

(APM)

BIG-IP

Cloud

Connector

(CC)

BIG-IP

SDN

Gateway

(SDNG)

BIG-IP

Mobile App

Manger

(MAM)

BIG-IP

Modules

BIG-IQ

Security

BIG-IQ

Cloud

BIG-IQ

Modules

BIG-IQ

BIG-IQ

EM …


Intelligent Mobile Broadband

Enhancing the mobile

packet core through value

added functions:

1. Policy and context

aware elements

2. Centralized policy

control with distributed

intelligence elements

3. Scalable and elastic

multi-tenant cloud

application delivery

infrastructure

Traffic Management



and partnerships



enter adjacent

technology areas

Productize Adjacent Technologies

1. Intelligent traffic and

subscriber mgmt – PEM

2. Carrier Grade NAT

3. Security

4. Signaling Delivery

Controller and DNS

5. Cloud/Virtual Editions

Today’s Mobile Networks Are Static/Inflexible

DNS PCRF AAA OCS CSCF

Control Plane Services

RADIUS, Diameter, DNS, SIP

GGS

N

PGW

WAP Gateway Video Optimization Transparent Caching

Value Added Services (VAS)

FW RTR DPI CGN RTR

Challenges

• Complex architecture… hard to scale

• Results in high CapEx and OpEx

• Difficult to add new services (requires changes to multiple elements, VLAN management…)

Subscriber

Internet

Next Gen Mobile Network


Control Plane Services

Radius, Diameter, DNS, SIP

WAP Gateway Video optimization Transparent caching

Value Added Services (VAS)

FW RTR DPI CGN RTR

Intelligent Platform

• Complex architecture… hard to scale

• Results in high CapEx and OpEx

• Difficult to add new services (requires changes to multiple elements, VLAN management…)

Subscriber

GGS

N

PGW

Attributes

• Subscriber / application centric

• Software driven / cloud-enabled

• Consolidation and virtualization of network functions

• “Network as the Platform” with open APIs

Internet

Subscriber

GGS

N

PGW

Intelligent Traffic Management 1

Internet

Intelligent Mobile Broadband Optimize, monetize, and secure

Subscriber

GGS

N

PGW

Intelligent Traffic Management

2

Network Function Consolidation

PEM CGN FW

Internet


Subscriber

GGS

N

PGW



PEM CGN FW

Distributed Enforcement

3

Diameter Signaling

PCRF AAA OCS CSCF

RADIUS, Diameter, SIP,…

Centralized Policy Control

3

Internet


PCRF AAA OCS CSCF

Radius, Diameter, SIP,…


Subscriber

GGS

N

PGW



PEM CGN FW


3

PCRF AAA OCS CSCF



3

Internet

Signaling Delivery

Controller


Key Win – Shared Family Plans

Requirements

Allow real-time monitoring and metering of 2G, 3G, and 4G usage consumption for subscribers

that are members of a shared family plan. Decrementing in near real time the total usage from the

shared data plan

• F5’s SDC receives device usage information

• Routes all share data plan devices to one Turbo Charging server based on the IMS subscriber information – eliminating all post processing

Openet Gold

FusionWorks

Billing Mediation

Engine Amdocs Amdocs

Amdocs Amdocs

Amdocs

Turbo

Charging

Unmediated

Usage for

Shared Data

Users

SDC

Subscriber DB

PCRF AAA OCS CSCF



Subscriber

GGS

N

PGW



PEM CGN FW


PCRF AAA OCS CSCF



Internet

Signaling Delivery

Controller

DNS DNS

Domain Name

Service

4


PCRF AAA OCS CSCF



Subscriber

GGS

N

PGW



PEM CGN FW


PCRF AAA OCS CSCF



Internet

Signaling Delivery

Controller

DNS DNS

Domain Name

Service

VAS VAS

Video Optimization, WAP,

URL Filtering, …

Cloud-Enabled and Software

Driven VAS Optimization

5

Data Center


PCRF AAA OCS CSCF



Subscriber

GGS

N

PGW



PEM CGN FW


PCRF AAA OCS CSCF



Internet

Signaling Delivery

Controller

DNS DNS

Domain Name

Service

VAS VAS VAS


URL Filtering, …



5

Data Center

Orchestration

……


PCRF AAA OCS CSCF



Subscriber

GGS

N

PGW



PEM CGN FW


PCRF AAA OCS CSCF



Internet

Signaling Delivery

Controller

DNS DNS

Domain Name

Service

VAS VAS VAS


URL Filtering, …



Data Center

……

Software Defined Networking

6


Subscriber

GGS

N

PGW



PEM CGN FW


PCRF AAA OCS CSCF



Internet

Signaling Delivery

Controller

DNS DNS

Domain Name

Service

VAS VAS VAS


URL filtering, …



Data center

……


Control Plane Application Plane

Data Plane

Unified Intelligent

Services Platform


Subscriber

GGS

N

PGW



1

2


PEM CGN FW


3


Radius, Diameter, DNS, SIP

Signaling Delivery

Controller


VAS VAS VAS VAS VAS


URL filtering, …



4

Data center

Orchestration

5

Enablement – Increase revenues

• Agile application delivery platform – accelerating time to deliver new services

• Accelerating “application long tail” time to market by leveraging open eco-system

Economics – Reduce network costs (CapEx, OpEx, space/power)

• Consolidated network functions

• Secure network and subscribers

• Exploiting virtualization technologies – cloud-enabled and software driven

• Extensible and programmatic architecture

Experience - Increase customer intimacy

• Unified application, data, and control plane data and analytics

E3 – Enabling the Intelligent Mobile Broadband

Karl Triebes EVP Product Development & Chief Technical Officer

TECHNOLOGY UPDATE / ROADMAP

SOLAR v11.3

• 76 Major Features!

• Topaz

• PEM w/DPI

• CGNAT

• Stratos, Treadstone, P8 and Centaur NEBS

• WAM Enhancements

• SAML on APM

• High performance VEs

• And much more!!

SOLAR Project Stats (So Far)

• Number of developers that contributed to release:

• Number of contributing teams:

• Number of contributing locations:

• Lines of code changed or added:

• Number of tests run:

• Number of Person-Years (not including hardware):

13,733,854

All 6

670

51

>31,000

325

F5 Technology

F5

Application Focus

Modularity & Consolidation

Scalability & Extensibility

Hardware and Software Platforms

TMOS, Best-of-Breed Hardware and

Virtual Editions

VCMP, CMP, CMI & ScaleN

iRules

Feature Modules, iControl

Consolidation, TMAPI & Cloud IQ API

iApp, Application Control Plane,

BIG-IQ, App Plug-in modules

Best-of-Breed Performance

TMOS: The ADC Operating System

SS

L

Co

mp

ressio

n

Client

Side

Server

Side GT

M

TC

P E

xp

ress

Ca

ch

ing

Microkernel

High Performance Scalability Fully Integrated Stack from L2 – L7+

Dedicated High Performance HW – NICS / SSL/ Compression / Other

iRules

Client

MCPd

TCP Proxy

OneC

onnect

XM

L

Ra

te S

ha

pin

g

AS

M

We

b A

cce

l

Fu

ture

L4

/L3

Ro

utin

g

HT

TP

AP

M

iControl API

Core Technology for F5 BIG-IP Products

Server

Application and Service Delivery Fabric: Scale Up, Scale Out; Delivering True On-Demand Scale and Resiliency

vCMP Instance

VE Distribution

N Way Clustering

vCMP Virtual Clustered Multi-Processing

SuperVIP clusters

Scale Up

“Elasticity”

Scale Out

“Resiliency”

Centaur (PB300) PCB Award

FPGAs and BIG-IP

• Holistic and balanced system architecture - All part of a Purpose Built system

• BIOS, Driver & FPGA tuned for highest system performance

• Field Upgradable (standards extensions, feature adds, bug fixes, etc).

VIPRION 8 BLADE CHASSIS PB300 BLADES

> 900M! SYNCHECK

> 640Gb! Traffic

New Appliance Line-up

BIG-IP 1600 60K L4 CPS

1G L7/L4 TPUT

BIG-IP 3600 2G L7/L4 TPUT



BIG-IP 11000/11050 > 42G TPUT

BIG-IP 7000 Series

BIG-IP 4000 Series

BIG-IP 2000 Series

> 40G TPUT FPGA Acceleration VCMP

BIG-IP 5000 Series

BIG-IP 10000 Series

BIG-IP 8900/ 8950

> 20G TPUT

> 40G TPUT FPGA Acceleration VCMP SSL Performance Options NEBS Option

> 80G TPUT 40 GbE Ports FPGA Acceleration VCMP SSL Performance Options NEBS Option

> 10 G TPUT

> 5G TPUT

Chassis Roadmap

VIPRION P8 Chassis

Cerebus Blade

• 2x performance of Centaur VIPRION blade

• Hardware offload with FPGAs

• NEBS option available

• 8 Slot Chassis

• Focus on Telco

• 2x Performance of 4 slot chassis

• Support Centaur and PB200 blades

• NEBS Compliant

ARMSTRONG Next

Generation

• Target Multi-100’s of Gbps per blade

• 100 GbE ports

• Multi-terabit class chassis

• NEBS Compliant

Victoria II Blade

• >2x performance 2100 Blade

• Greater VCMP Density/Performance

• 2400 chassis compatible

• Hardware offload in FPGAs (Security, etc...)


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

BIG-IP Modules – Now and Future


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

BIG-IP Module Architecture

Store

Data Model

Services Management

Platform

Cloud IQ API (Common REST Framework)

Solutions

BIG-IQ Centralized Management Platform

EM UI

ADC Business Logic

EM

FW UI

FW Business Logic

FW Manager

Cloud UI

CM Business Logic

Cloud Manager


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

Cloud

Manager

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

The Cloud and Beyond

Strategic Point of

Control in the Cloud

Dynamic

Data Center

and

Private Cloud

Virtual Editions (all modules) High Performance VEs, Platforms(VMware, HyperV, KVM, Xen, Amazon)

Cloud Manager

iApp Based Orchestration Integration Platform,

VMware Plug-in Cloud APIs

Application Cloud Connector

Secure, Optimized Bridge, L2 Extension to Public Cloud,

Public Cloud Integration Framework,

Amazon Plug-in

F5 Virtual Edition Performance Targets

0

2

4

6

8

10

12

VMware HyperV Xen KVM

Gb

ps

OPENFLOW – Reality or Hype?


OpenFlow

SDN is Early Days!


BIG-IP SDN Platform


Session, User, Application,

Analytics and Other Network

Services

ADN

(L4-L7) Services

Centralized Controller Integration (L2-L3 Centralized Policy)

Network Virtualization (L2-L3)

VXLAN NVGRE Open Flow

Auto

mation M

anagem

ent

and O

rchestr

ation

Programmability Extensibility Enterprise/CG ready


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ™

BIG-IQ

EM™ …

Mobile and Service Provider

Mobile Access

Manager

Policy Enforcement Module (PEM) Architecture

TMOS Kernel

ANALYTI

CS

Classify

PCRF

External

Logging

Gx

Subscriber

Database

HTTP

From

GGSN Policy

Decision

Gi

RADIUS

Performance

• 41 Gbps/blade

• 328 Gbps/Chassis!

• 60K subscribers/sec

F5 Signaling Deliver Controller - SDC

Visited PLMN

Traffix SDC

Gr

S6a

Trusted

3-GPP Access

IP Access

Gx/Rx/S9 Ro/Gy S6a/S6d

Rx

Gx

Untrusted

Non 3-GPP IP

Access

S9

S6a

SWa/S6b/STa

SWa/SWn

STa

Provisioning

HSS HSS OCS OCS PCRF PCRF

vPCRF

MME

MME

AAA

PCEF HLR

AS/CSCF

OSS/BSS

OSS/BSS

OSS/BSS

SDC

Protocol Gateway example

Diameter LDAP

HTTP

Diameter

PCRF Directory

Server

GGSN

Billing

Billing

Diameter, RADIUS, LDAP, SQL, HTTP, COPS,

Web-Services, JMS, CAMEL, MAP, GTP’

Diameter load-balancing layer


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

Acceleration Products


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

Acceleration Products

Acceleration

Module

Web Accelerator Today

• Bandwidth Reduction

• Image Optimization

• HTTP compression

• Content Minification

• Caching

• Distributed Server Caching

• Client-side caching with IBR

• Smart Client Cache with HTML5 Local Storage

• Front End Optimization

• Content Inlining / Concatenation

• Content Prioritization (Reordering)

• Mobile Optimizations

• SPDY / TCP

• Mobile Client Capabilities DB

• Other

• Clustering / Request Queuing

• Video Optimization (Apple HSL)

• Faster

• Page Load

• Rendering

• Less

• Round Trips

• Bits on Wire

Web Accelerator Today

Introducing the “WAMer” The F5 Web Acceleration Performance Tool

• WAMer wam-plifies ANY Website

• WAMer Generates Detailed Report of how F5’s Web Acceleration Technology can help!

• Launching this Quarter!!

WEB ACCELERATOR VALUE!

0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

citrix.com radware.com a10networks.com riverbed.com f5.com

First

Repeat

Page Load Time Improvement As Measured by the F5 WAMer

% Acceleration with WAM!

Do you Need Web Accelerator? Accelerated

www.radware.com

Not Accelerated www.radware.com

On lower bandwidth network of 4Mbps and RTT of 50ms (25ms each direction)

45% Improvement in Page Load Time


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

DNS Acceleration

Industry Leading DNS Performance DNS Express and DNS Cache

* Not all performance numbers are from actual test runs. Several performance numbers extrapolated from test runs on another platforms.

Mil

lio

ns

re

sp

/se

c

0

2

4

6

8

10

BIG-IP 4200 BIG-IP 8950 BIG-IP 11000 VIPRION - 4 Blades (C4400 w/ B4300)

DNS Express (Reverse Proxy)

DNS Cache (Forward Proxy)

Over 11M


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

Unified Security

Re-Perimeterizing Security From Analyst Day, 2

• The limits of current perimeter security will force us to shrink perimeters to clients, applications, sessions, transactions and ultimately data

• IP convergence and mobility will accelerate this process by challenging existing network security architectures

• We will realize that securing our own backyard is no longer sufficient

Security Incidents by Attack Type

Topaz L3-L7 Unified Security

• PCI Compliance

• DOS

• IP Intelligence

F5 Unified Security Platform

3rd Party

Products

Apps,

Databases,

CA,

Virus scan,

Spam check,

SIEM,

Scanner

3rd Party

Interface(s)

BIG-IP (TMOS) iRules, High Performance Proxy, SSL,

ScaleN, BIG-IP platforms, Virtual Edition,

HA & Performance, Full state fail-over

Classification

Outbound and

User Security

Analytics &

Reporting

(AVR)

ASM

&

ADC Firewall

APM &

Edge

Gateway

BIG-IQ Centralized Management


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

Mobile Access

Manager

BIG-IQ™

BIG-IQ

EM™ …

BYOD & Secure Access

APM - SAML and BIG-IP Federation

Service Provider

• Enabling SAML access control and SSO for Enterprise Applications

Identify Provider

• Providing SAML authentication and SSO to SaaS Applications in the Cloud

BIG-IP Federation

• Allowing SSO across broad BIG-IP APM deployments

SSO and SaaS Integration for Mobile Devices

(BYOD)

BYOD Architecture

iOS and Android Devices • Wrapped Enterprise Applications

• Enterprise PIM App

BIG-IP APM for Access, Authentication,

MADM Proxy

Wrappers + AppTunnels for Corporate Access

BIG-IQ Platform for AppStore, MDM,

MAM Functions • On Premise or Cloud Based

Apple Push Notification

BYOD Strategy and Roadmap

• Secure Access

• Authentication and Policy Engine

• Edge Portal & Edge Clients

• Application Tunnels

• Connectivity SDK

• Secure VDI, Exchange and WebDAV Proxy

• Mobile Application / Device Management

• Basic MDM Functions Enterprise App Store

• Application Wrapping

• Mobile Enterprise PIM App and Secure Browser

• Reporting


TMOS®

BIG-IP®

Advanced

Firewall

Manager

(AFM)

BIG-IP®

Application

Security

Manager

(ASM)

BIG-IP®

Global

Traffic

Manager

(GTM)

BIG-IP®

Local

Traffic

Manager

(LTM)

BIG-IP®

Carrier

Grade NAT

(CGNAT)

BIG-IP®

Policy

Enforce-

ment

Manager

(PEM)

BIG-IP®

WAN Opt

Manager

(WOM)

BIG-IP®

Web-

Accelerator

(WA)

BIG-IP®

Access

Policy

Manager

(APM)

BIG-IP®

Cloud

Connector

(CC)

BIG-IP®

SDN

Gateway

(SDNG)

BIG-IP®

Mobile

App

Manger

(MAM)

BIG-IP®

Modules

Service Provider

Security

Cloud

Future Modules

ADC

BIG-IQ

Security™

BIG-IQ

Cloud™

BIG-IQ

Modules™

BIG-IQ™

BIG-IQ

EM™ …

BIG-IP Module Architecture

http://devcentral.f5.com/

http://www.facebook.com/f5networksinc

http://www.linkedin.com/company/f5-networks

http://twitter.com/f5networks

http://www.youtube.com/f5networksinc

Dave Feringa Executive Vice President of Worldwide Sales

SALES UPDATE

Sales Headcount Growth

FY2012

998

FY2011

838

FY2003

164

Worldwide Sales Organization

Dave Feringa WW Sales

EMEA Sales

3.8 Years

APJ Sales

2.0Years

Americas Sales

14.2 Years

Traffix Sales

1.1 Year

Channel-Partner

6.3 Years

Field System Eng

10.8 Years

Sales Operation

12.5 Years

Channel and Partner Support

Field System Support

Sales Operations Support

Traffix Sales Support

Average

Tenure

7.7 Years

Million Dollar Accounts

16

35

47

66

7667

84

112

129

2004 2005 2006 2007 2008 2009 2010 2011 2012

• 15% more accounts

• Associated bookings up 14%

3 YR SW Revenue Trends

46%

37%

58%

FY2010 FY2011 FY2012

$

Year-over-Year Growth

Sales Productivity: FY2012 A

ve

rag

e Q

ua

rte

rly B

oo

kin

gs

by T

en

ure

0-6 months 6-12 months 1 - 2 Yrs 2 - 3 Yrs > 3 Yrs

Competitive Landscape

Security

• Juniper

• Check Point

• Cisco

• Imperva

ADC

• Citrix

• A10

• Radware

• Brocade

Service Provider

• Tekelec

• Acme Packet

• Cisco

• Juniper

F5 Wins

Investing in Security

Security Focus

Channel

• Recruitment of new security-focused partners

• Deeper engagement with WW SIs

• Continue VAULT incentives

Field Competency

• Security Accreditation launch in November

• ISC focus

• Owner for security strategy and engagement in each theater

Field Engagement

• Security Evangelists: Drive F5 vision and opportunity creation

• Security Architects: Design F5 security solutions for qualified opportunities

Investing in Service Provider

Service Provider Focus

Intelligent Traffic Steering

Carrier Grade IPv4 to IPv6 translation

Monetizing LTE Services

Security

Managed and Cloud Based Services

Traffix Focus

Channel

• Recruitment of new Telco-focused partners

• Deeper engagement with the WW SP Sales teams

• Continue the focus on NEPs

Field Competency

• FSE and Sales Accreditation with Field Readiness

• Carriers deploying LTE is the Sales focus

• Align with each theater Telco leader

Field Engagement

• Dedicated Traffix VP

• Laser focus on top 30 accounts globally

• Secure PoCs

• Effectively respond to RFxs

• Drive awareness

ADC Growth

Field Focus – Cisco Replacement

ACE Replacement Execution

ACE Replacement Education

ACE Incentive Program for Channels WW

Announced Aggressive Trade-In Program with Services

Recruit Cisco Partners

Cisco Sales Specialist

Identify Cisco Accounts and Outreach

Leverage Platform Refresh

Each theater

to develop

plans for Q2-

Q4

Partner with

Services

on renewals

Unsolicited

proposals

Develop

programs

with Channels

Leverage Platform Refresh

40K Units

from

Original v9

Each Theater

to Develop

Plans for Q2-

Q4

Partner with

Services

on Renewals

Unsolicited

Proposals

Develop

Programs

with Channels

Leveraging Our Technology Centers

• Over 300 customer visits in FY2012

• 25% increase over previous year

• Audience is primarily senior management

• Positive impact to revenue and average deal size

• 30% increase in influential revenue

• Customers visiting tech centers deals are 2x the average

• Locations

• Seattle

• London

• New York (opening early 2013)

Major Customer Wins FY12

Competitive Replacement Win U.S. Customer

Customer

Products 22 VIPRION 2400s, 6 BIG-IP GTM 3900s, 3 VIPRION 4480s

Services 15 days Consulting Services

Two 4-day on-site training classes delivered by F5 and Trace3

Value $1.6M

Sales Cycle 14 months

Take Away Cisco and Brocade

Why We Won Reputation, Relationship, Perseverance, and Teamwork

• This client is all about being #1 in the market and this effort was about proving that F5 is #1 for their needs.

• The compelling event was based on both aging Cisco equipment and instability issues with Brocade.

• This client has to deliver five nines of application availability to their internal and external users. From the start we knew this had to be our main theme. In March 2012, we had an EBC that included their CIO and his executive team; in this meeting we gained executive alignment.

• During our 3-month POC we demonstrated our ability to deliver exceptional performance numbers, especially with SSL offload. A strong field engagement team along with corporate resources keep this campaign on track.

Security Win Global Financial Customer

Customer

Products 24 x 3900 BIG-IP ASM appliances with IP Intelligence, 2 x 1600 BIG-IP ASM appliance, 2 x Enterprise Manager 4000 – all deployed globally in London, Connecticut, and Hong Kong

Services Professional and Contracted Services

Value $760K for initial project with over $1m in further projects


Why We Won Showcasing Security

• Competing against Imperva, we needed to change the game from a Layer 2 security model to a Layer 3 one, which we did successfully.

• We then entered into a structured POC against Imperva with customer that ran over a 9-week period.

• BIG-IP ASM was found to meet the bank’s new requirements at Layer 3 better, and commercially we were 75% of the cost with 4 times the performance.

• Customer stated that we met or exceeded all of their requirements.

VMWare Win Japan Customer Customer

Products 3 VIPRION 4480 chassis with 3 B4300 blades (ADD SSL MAX)

2 VIPRION 2400 chassis with 2 B2100 blades (ADD SSL MAX)

2 BIG-IP LTM 6900s (ADD SSL MAX)

Services Standard support

Value $874K

Sales Cycle 6 months (including 2-month eval with TechCenter)

Why We Won Our Platform

• This customer is a large portal site and the first VIPRION user in Japan. They have built their service infrastructure around our platform.

• Only F5’s B4300 met customers required 2k SSL TPS spec and using iRules for L7 switching.

• The VIPRION platform was again chosen for its superior performance and scalability. Customer uses VMware-based server infrastructure, and offloading SSL onto VIPRION enabled them to increase VM density while saving cost.

• Customer’s IT Center visit and testing helped confirm the test methods.

Traffix Win U.S. Mobile Customer Customer

Products Traffix

Services GTP Prime Software

Value $2,600,000


Why We Won Products

• Follow-up work to the Signaling Delivery Controller (SDC) business.

• Amdocs is the integrator and the Traffix SDC provided the customer LTE traffic with context-based and high availability routing.

• The GTP Prime Project will provide usage freshness and notifications in near real-time for client’s shared data customers.

Julian Eames Executive Vice President Business Operations

SERVICES UPDATE

F5 Global Services

SUPPORT SERVICES

Provide post-installation remote

assistance to customers that require

support with F5 software or hardware

PROFESSIONAL SERVICES

Deliver all consulting activities and

advanced services that ensure a highly

available, scalable, secure, and agile

infrastructure for our customers

KNOWLEDGE SERVICES

Encompass training, certification, knowledge,

and diagnostic tools that help customers

effectively utilize their F5 technology

Customer focus

Service excellence

Technology expertise

Global coverage

F5 Global Services

Closer to the customer to drive product revenue

F5 Global Services Organization

• Revenue growth YoY 30%

• Professional Services (PS) revenue growth 46%

• Integrated Traffix team and grew substantially

• Maintained high customer satisfaction scores

through 30% revenue growth and V.11 release

• Replaced call management system

• Piloted partner PS Program GUARDIAN

• Created first Certification test

SERVICE REVENUE HIGHLIGHTS 2012

QUARTERLY DEFERRED SERVICES REVENUE

2012 ATTACH RATE IMPROVEMENTS

BY THEATER 3 YEARS AVERAGE

F5 Professional Services (PS)

• GUARDIAN program pilot across all

geographies

• Built out Business Development team

developing 20 new packaged services

• Revenue growth 46%

• Demand creation across new

packages

• Developed Bench strategy and

prospects

• Grew to 142 consultants

CUSTOMER SATISFACTION

HIGHLIGHTS 2012

• Launch GUARDIAN program

• Implement Bench strategy

• Increase effort on demand creation

with product sales team

• Introduce PS management tool

• Maximize Cisco ACE migration

offering

• Focus on services that drive product

adoption

2013 FOCUS AREAS

PROFESSIONAL SERVICES ORGANIZATION

*Average EMEA, NA, and APAC Survey Score

Configuration Optimization Services

Application Vulnerability Assessment Services

Resident Expert

Custom Scripting

BIG-IP Upgrade Services

Application Monitoring

Consulting OnDemand BIG-IP LTM Remote Implementation

BIG-IP Installation Services

ARX Installation Services

Enterprise Manager Installation Services

IPv6 Solution Services

BIG-IP Migration Services Cisco ACE

Design Review and Verification

Architecture Design for Exchange

BIG-IP LTM Upgrade Assessment

File Storage Assessment

F5 Professional Services

BIG-IP Proactive Assessment

FirePass to BIG-IP APM Migration Technical Account Manager

iRules OnDemand BIG-IP Migration Assessment F5 Professional

Services

BIG-IP MIGRATION SERVICES CISCO ACE

CUSTOMER

• Proactive

• Scalable across world

• Quality assurance of channel

• Flexible coverage model

• Improved product sale influence

• Increased F5 PS revenue growth

Coverage Model 2013 Professional Services

PARTNER F5 DIRECT

GUARDIAN RE

MO

TE

CO

NS

ULTA

NT

S

BE

NC

H

F5 Support Services

• 412 employees worldwide

• 306 technical service employees

• 95,298 cases handled in 2012

• Q42012 customer satisfaction 9.1

• ISO 9001:2008 certification for technical support

SUPPORT CENTER LOCATIONS BY THE NUMBERS

• Singapore

• Beijing

• Tokyo

• Shanghai

• Tel Aviv

SUPPORT SERVICES OFFERED

• Standard (5 x 10)

• Premium (7 x 24)

• Technical Account Manager (TAM) managed

account

• Premium Plus: TAM managed with dedicated

support resources

• Advanced Replacement Services, including

4-hour door-to-door and next business day

• Seattle

• Liberty Lake

• Lowell

• Chertsey

SUPPORT TYPES

F5 Support Services

SUPPORT ORGANIZATION SUPPORT CENTER LOCATIONS

CUSTOMER LOYALTY

In our satisfaction survey, on average 94% of customers say that they are very likely or likely to recommend F5 based on their support experiences.

2013 FOCUS AREAS

• Build on Aspen call management

platform

• CSP, AskF5

• Develop customized offerings and

delivery for:

• Security, Cloud, and Traffix /

Service Provider

• Use existing processes to build

knowledge and experience on new

releases and markets

F5 Knowledge Services

• 6039 Customers, 2010 Partners trained by

F5 and ATCs in FY12

• 317 New Hires attended boot camps in FY12

• 9761 WBT modules completed in FY12

• On a scale of one to five, 4.8 customers

would recommend F5 training to their

colleagues

AUTHORIZED TRAINING CENTERS

(ATCs)

BY THE NUMBERS

KNOWLEDGE SERVICES OFFERED

• No-charge web-based training (WBT)

• Onsite training classes

• Open-enrollment public classes (F5 and ATCs)

• Instructor-Led

• Virtual Instructor-Led

ONSITE WBT PUBLIC CLASSES

• Complete Certification

• Roll-out University curriculum

• Further penetration of iHealth use

2013 FOCUS AREAS

Engineer Certification Track

BIG-IP Administrator

BIG-IP LTM

Specialist

BIG-IP GTM

Specialist

BIG-IP ASM

Specialist

BIG-IP APM

Specialist

iRules Specialist

BIG-IP WAM/ WOM

Specialist

Availability Expert

Security Expert

Optimization Expert

Service Provider Expert

Application Delivery Architect

Application Delivery Engineer

BIG-IP iHealth

• Displays a snapshot of the BIG-IP system

configuration

• Evaluates the configuration against a

knowledge base

• Provides tailored feedback

• Configuration issue

• Description of the issue

• Recommendations for resolution

• Link to AskF5 Solution

iHEALTH USAGE STATS PROACTIVE SYSTEM CHECK-UP

• Improved module support

• Usability enhancements to the

iHealth web UI

• Expansion of API capabilities

• Improvements to graphing

• Better command coverage

iHEALTH ROADMAP

• 612 Unique Internal iHealth Users in Q4

• 3202 Unique External iHealth Users in Q4

• 25242 Qkviews uploaded in Q4

AskF5

Storehouse for thousands of solutions to help

customers manage F5 products more effectively

• Search product-specific information

• Discover recent additions

• Subscribe to hear the latest

• Engage by providing feedback

INCREASE EFFICIENCIES

COMPREHENSIVE KNOWLEDGE TOOL

AskF5 ROADMAP

• Publish Heuristic and Known Issue

solutions for every customer-found bug

• Implement Search Engine Optimization

(SEO) tool and Federated Search

• Deploy Knowledge Management

System (KMS) and redesign AskF5 as

part of the KMS implementation

http://www.askf5.com/

DevCentral - FY12 Highlights

18

0

CLOUD MIGRATION

MARKETING PROGRAM SUPPORT

COMMUNITY APPLICATIONS & PROGRAMS DEVCENTRAL BY THE NUMBERS

• Membership Grew 26% YoY

• Added 23,075 new registered members in Fy12

• 1.9M Visits (+14% YoY) / 997k unique visitors

• 7M Pageviews (+22% YoY)

• Bounce Rate: DOWN 34% due to continued site

enhancement

• Successful, first customer to do all VE for

DC operations with Bluelock

• 99.9% availability with security &

performance

• Agility: on 11.2 within 3 days of Release

• Innovation Labs

• Beta

• Live Guru Events

• Agility Events (US, EMEA, APAC)

• Video / outbound evangelism (video, etc.)

• Initiated Marketo, taxonomy, other program

integration

TRENDS

Visits (YoY)

• UK: +21%

• India: + 42%

• France: +21%

• Germany: +31%

• Canada: + 30%

• China: +10%

Pages/Visit (YoY)

• Australia: +20%

• India: + 29%

• Singapore: +39%

F5 Global Services Organization

18

1

STRATEGIC INITIATIVES

SERVICES DRIVE MORE PRODUCT SALES PRODUCT SAT WITH SERVICE USE

2 Year Follow-on Sales for Services Purchasers

CLOSER TO THE CUSTOMER TO DRIVE

PRODUCT REVENUE

Jim Ritchings Senior Vice President of Business Development

BUSINESS DEVELOPMENT/ STRATEGIC PARTNERSHIPS

F5 and Microsoft Partnership

• Joint investment, teamwork, thought leadership, and strategic planning

• Deep and strong Product Group relationships

• Tight Field collaboration and teaming

• Growing global community of key Microsoft influencers

Microsoft Technology Centers

Investments F5/Microsoft

Solutions in Action

SSTP, RDS/Terminal Services, IIS/ASP.NET

Solution Development

Across Products and Technologies

A Big Launch Year for F5 and Microsoft FY ’13

Incremental Revenue

Fast, Secure & Available Apps

Marketing & Messaging Campaigns

Sales & Channel Enablement

Integrated Solutions

Growing Pipeline

App. Server

Web Server

Database

Server

Storage

User

App. Server

Web Server

Database

Server

Storage

User

App. Server

Web Server

Database

Server

Storage

User

F5 occupies strategic points of control in the Oracle Stack

F5 and Oracle Partnership

F5 and Oracle Partnership

• F5 and Oracle Sales Engagement Office

• Programmatic Field Engagement

• Benefits to Oracle

• Complete Solutions

• Monetize Acquisitions

• Benefits to F5

• Deeper Account Penetration

• Increased Security Sales

• Growing Pipeline and Revenue

F5 and VMware Partnership

F5 Sales &

Marketing

VMware Sales &

Marketing

New Solution Examples BIG-IP Enhancing VMware View™ VDI

VMware View

Servers

The Future

SDN and VXLAN

Cloud:

vCloud Director®

Manageability and Automation

VDI:

VMware

View™

Abstraction Layer

Network Control

Plane

Security Partnerships

F5 Security Partnership Focus Areas • Application Security

• DAST / Vuln. Assessment

• Anti-Fraud

• Endpoint Security

• Access Security • Authentication

• Mobile App/BYOD

• IAM

• Security Management • Analytics

• SIEM

• Core Security Services • Encryption / Secure Transport

• IP Context

• App / Content Classification

Application Security

Access Security

Security Management

Security Services

Partner-Focused Revenue Program

• The Solution • Integrated BIG-IP Application Security Manager (ASM) with Leading DAST

Products

• Vulnerabilities discovered and mitigated from BIG-IP ASM GUI

• The Program Elements • F5 Free Scan capability in BIG-IP ASM

• Joint selling

• Launched to Market – July ’12

• Ongoing messaging and marketing

• Results • Double digit % pipeline growth

• Acceleration and expansion of existing deals

• Increased Security buyer introductions

• Incremental sales wins

Service Provider Partners

SP Partner Portfolio

Network Equipment Providers

Embedded Solution Partners (ESP)

Technology Alliance Partners (TAP)

Service Provider Partners Focused Solution Areas

Private content & services

APPLICATION-AWARE

SERVICES & CLOUD

SERVICE DELIVERY

SCALING & SECURING

THE CONTROL PLANE INTELLIGENT TRAFFIC MGMT

SECURITY

Residential

Business

Data

Center

Converged

IP/MPLS

VAS for public content

In Summary

• Microsoft, Oracle, and VMware partnerships maintain strong growth

• Field-based engagement and enablement accelerating

• Solution integration creates massive barrier to entry

• Partnership strategy tightly aligned with growth areas of Service Provider and Security

Andy Reinland Executive Vice President and Chief Finance Officer

BUSINESS MODEL OVERVIEW / FINANCIAL OUTLOOK

F5: Fiscal Year-End Highlights Continued Market/Technology Leader in Application Delivery Networking

• Zero debt

• Strong cash flow from

operations: $495 million

in FY12

• $1.2 billion in cash and

investments

• Deferred revenue:

$447.3 million, up 30.3%

year-over-year

Healthy Balance Sheet

• Non-GAAP Gross

margin: 84.0% in FY12,

up from 82.8% in FY11

• Non-GAAP Operating

Margin: 38.6% in Q4,

38.3% for FY12

Solid Profitability

• Total revenue up 20%

year-over-year

• Product revenue up 13%

year-over-year

• Sequential growth

throughout the year

• Y/Y growth across all

geographic regions

Revenue Growth

1,152

1,377

0

200

400

600

800

1,000

1,200

1,400

FY11 FY12

$M

illi

on

s

241

275

0

25

50

75

100

125

150

175

200

225

250

275

FY11 FY12

$M

illi

on

s

417

495

0

50

100

150

200

250

300

350

400

450

500

FY11 FY12

$M

illi

on

s

2,490

3,030

0

250

500

750

1,000

1,250

1,500

1,750

2,000

2,250

2,500

2,750

3,000

FY11 FY12

Revenue Net Income Cash Flow from

Operations

Headcount

FY 2011 vs FY 2012

Large Customer Penetration

60%

49%38%

64%

52%46%

67%

57%

47%

0%

10%

20%

30%

40%

50%

60%

70%

80%

NA F500 EMEA FT500 APAC G2000

Customer Penetration

FY10

FY11

FY12

56

39

30

62

42

32

70

46

35

0

10

20

30

40

50

60

70

80


Installs / Customer

FY10

FY11

FY12

13%

8%

5%

14%

8%

5%

16%

10%

7%

0%

2%

4%

6%

8%

10%

12%

14%

16%

18%


50+ Install Customer Penetration

FY10

FY11

FY12

217182

169

235205 192

249

217

175

0

50

100

150

200

250

300


50+ Installs / Customer

FY10

FY11

FY12

Average Installs in Accounts with >50 Units

Deal Trends

$0

$20

$40

$60

$80

$100

$120

FY09 FY10 FY11 FY12

($0

00

)

Average Order Size

0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

FY09 FY10 FY11 FY12

WW BIG IP Revenue Mix

High End

Low End

0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

100%

FY09 FY10 FY11 FY12

New vs Repeat Business

Repeat

New

83.8% 84.1%

0%

20%

40%

60%

80%

100%

Total Revenue

Revenue by Industry Vertical Non-GAAP Gross Margins

Revenue by Region

Revenue Breakout

0

50

100

150

200

250

300

350

400

1Q10 2Q10 3Q10 4Q10 1Q11 2Q11 3Q11 4Q11 1Q12 2Q12 3Q12 4Q12

$ M

illi

on

s

Service

Product

Product Service

Technology (17%)

Telco (19%)

Financial (20%)

Government (excl US Federal)

(7%)

Other (27%)

Americas (56%)

EMEA (22%)

Japan (7%)

APAC (15%)

US Federal (10%)

191206

230254

269 278 291315 322

340 353 363

100

150

200

250

300

350

400

$ M

illio

ns 80

81 8182

83 83 83 8384 84 84 84

70

75

80

85

Pe

rce

nt

Revenue

Operating Margin (Non-GAAP)

EPS (Non-GAAP)

Gross Margin (Non-GAAP)

Income Statement Trends

32 3234

38 38 38 38 39 38 38 38 39

20

25

30

35

40

Pe

rc

en

t

0.52 0.560.66

0.790.88 0.88

0.971.06 1.03

1.09 1.14 1.12

0.20

0.40

0.60

0.80

1.00

1.20

$

51

39 40 40

4846

48 47

5249 49

46

30

35

40

45

50

55

60

Da

ys

Balance Sheet Trends

211 226 240259

288313 322

343380

413 434 447

100

150

200

250

300

350

400

450

$ M

illi

on

s

Deferred Revenue

Cash Flow from Operations Cash & Investments

DSO

74 78 7586

103

91101

121132

102113

149

0

25

50

75

100

125

150

$ M

illi

on

s

647712

781

862

952997

1,0571,013

1,115

1,0341,107

1,195

500

600

700

800

900

1,000

1,100

1,200

1,300

$ M

illi

on

s

58% 57% 59%

60% 59% 59% 57% 60% 59% 58% 57% 56%

24% 24%

22%

22% 22% 22% 20%

20% 21% 21% 21% 22%

11% 11%

12%

12% 13%

14% 16%

13% 14%

14% 15%

15%

6% 8%

7%

6% 6%

6% 7%

7% 6%

7% 7%

7%

-

25

50

75

100

125

150

175

200

225

250

275

300

325

350

375

400

1Q10 2Q10 3Q10 4Q10 1Q11 2Q11 3Q11 4Q11 1Q12 2Q12 3Q12 4Q12

Revenue Trends: Geography

$ M

illio

ns

EMEA

APAC

Japan

Americas

FINANCE/OPS

323 (11%)

MANUFACTURING

50 (2%)

SALES (QUOTA)

355 (12%)

SALES (SUPPORT)

643 (21%)

MARKETING

190 (6%)

PRODUCT

DEVELOPMENT

774 (26%)

PROFESSIONAL

SERVICES

694 (23%)

Headcount

4Q12 Results / 1Q13 Targets

Q4 Results Q1 Guidance

Revenue $362.6 $363 - 370

Gross Margin (GAAP) 82.7% ~ 83%

Operating Expenses (GAAP) $188.0 $193.5 – 198.5

EPS (GAAP)

EPS (non-GAAP)

$0.85

$1.12

$0.86 – 0.88

$1.14 – 1.16

DSO 46 days Mid- to High-40s

Inventory $17.4 $17 - 19

Cash Flow from Operations $149 > $145

Tax Rate (GAAP) 39.9% 37.0%

Tax Rate (Non-GAAP) 37.0% 34.5%

Dollar amounts in millions except EPS

• Revenue growth

• Sequential revenue growth throughout the year

• More robust product growth in the back half of the year

• GAAP gross margins consistent with Q1 guidance of 83%

• Non-GAAP operating margin at or around 38% for the year

• A bit lower in first half, and stronger in second half

• Stock-based compensation expense at Q1 levels until next annual grant in August

• CapEx approximately $6-12 million per quarter • Some quarter to quarter variability related to investments

• Annual tax rates

• GAAP: 37%; Non GAAP: 34.5%

• Rates do not assume reinstatement of R&D tax credit

FY13 Planning Assumptions

John McAdam President, Chief Executive Officer, and Director

WRAP-UP

http://devcentral.f5.com/

http://www.facebook.com/f5networksinc

http://www.linkedin.com/company/f5-networks

http://twitter.com/f5networks

http://www.youtube.com/f5networksinc

F5 NETWORKS ANALYST AND INVESTOR MEETING

Documents

Transcript of F5 NETWORKS ANALYST AND INVESTOR MEETING