Download as pdf or txt
Download as pdf or txt
You are on page 1of 211

Agenda

8:00 Welcome/Introduction John McAdam



President & CEO
8:10 Delivering, Managing and Orchestrating Manny Rivelo

Application Services across Hybrid EVP Security & Strategic Solutions
Infrastructures
8:55 Current Product Offerings/Focus and Karl Triebes

Direction in Product Development EVP Product Development & Chief Technical Officer
9:40 BREAK
9:55 Sales Update/Customer Use Cases Dave Feringa

EVP Worldwide Sales
10:30 Services Update/Leveraging Consulting Julian Eames

to Drive Product Sales EVP Business Operations
11:00 Overview of Business Development/ Calvin Rowland

Alliance Strategy SVP Business Development
11:40 Business Model Update/
 Andy Reinland

Financial Outlook EVP & Chief Financial Officer
12:00 Q&A
12:30 ADJOURN

© F5 Networks, Inc
Welcome

John McAdam
President, Chief Executive Officer, and Director
Innovate, Expand, Deliver

Manny Rivelo
EVP, Strategic Solutions
APPLICATIONS!
WITHOUT CONSTRAINTS.!
F5 VISION

© F5 Networks, Inc
PRODUCTIVITY!
WITHOUT CONSTRAINTS.!

© F5 Networks, Inc
BUSINESS!
WITHOUT CONSTRAINTS.!

© F5 Networks, Inc
DELIGHTING CUSTOMERS!
WITHOUT CONSTRAINTS.!

© F5 Networks, Inc
REVENUE GROWTH!
WITHOUT CONSTRAINTS.!

© F5 Networks, Inc
APPLICATIONS!
WITHOUT CONSTRAINTS.!
F5 VISION

© F5 Networks, Inc
Full-proxy enables superior user-to-application experience

End Users

Applications

© F5 Networks, Inc
4 Software Defined Application Services

3 Cloud Ready

2 Broadened Application Services

1 Application Delivery Controller

© F5 Networks, Inc 12
Synthesis
Software Defined Application Services Elements

Intelligent
Services Orchestration

High-Performance
Services Fabric

Simplified
Business Models

© F5 Networks, Inc
“Under the Synthesis umbrella,
F5 is making a number of thoughtful
improvements to its go-to-market
efforts. The company’s approach to
SDAS fits in step with the broader
industry’s focus on SDN topics…”

Zeus Kerravala
Principal Analyst, ZK Research

© F5 Networks, Inc
F5 Synthesis Partner Ecosystem
Network/SDN Cloud Security Orchestration Application Service Provider

© F5 Networks, Inc
Network/ Application Policy
Infrastructure
Intelligent Management
System (IMC),
Hyper-V NSX,
SDN System Center Virtual vCenter Orchestrator
Controller (APIC), VAN Resource Machine Manager (vCO)
Automation Manager (SCVMM)
UCS Director (UCSD)

Cloud Intercloud Enterprise Cloud


Services (ECS)
Azure, vCloud Air
Cloud Platform System
(CPS)

Other SourceFire Atalla, Office 365 vCloud Automation


Center (vCAC),
ArcSight,
AirWatch, Horizon (VDI)
Tipping Point,
WebInspect

© F5 Networks, Inc
THE F5!
PLATFORM.!
© F5 Networks, Inc
The F5 Platform
Service Provider customer

$1.5M
URL Filtering

Policy Enforcement Manager

$600K CGNAT

$1M Firewall iRules Advanced Firewall Manager

Local Traffic Manager ScaleN ScaleN

VIPRION VIPRION VIPRION

Pre-Client Traffic Mgmt Scale & Extend SDAS Evolution

FY2009 FY2010 FY2013 FY2014


© F5 Networks, Inc
The F5 Platform Versafe

Financial Services customer


Defense.net

Advanced Firewall Manager

Access Policy Manager /


$14M Secure Web Gateway

BIG-IQ BIG-IQ

Application Acceleration Application Acceleration


Manager Manager

Application Security Manager Application Security Manager

$10M Global Traffic Manager Global Traffic Manager

Local Traffic Manager Local Traffic Manager Local Traffic Manager

Pre-Client ACE Replace SDAS Evolution Future

FY2012 FY2013 FY2014


© F5 Networks, Inc
THE FUTURE.!
© F5 Networks, Inc
94
PERCENT
74
PERCENT
61
PERCENT

of organizations are of enterprises have of technology purchases


running applications or hybrid cloud strategies are now owned by the
experimenting with IaaS lines of business

Source: RightScale 2014 State of the Cloud Report Hybrid

© F5 Networks, Inc
1. Value of IT to the business
TOP 10! 2. IT contribution to strategy
CIO PRIORITIES! 3. Customer satisfaction
4. Innovative new ideas
5. Availability
6. Projects delivered on time
7. IT cost controls
8. Productivity improvement
Business Concerns 9. Business cost controls
IT Concerns 10. Revenue growth
Source: RightScale 2014 State of the Cloud Report Hybrid

© F5 Networks, Inc
Infrastructure Axis
Private DC / Software Defined /
Central Office NFV IaaS PaaS SaaS

On-premises Off-premises

DevCentral F5 Downloads

Hype
Build/Test

© F5 Networks, Inc
Application

Web Application Firewall


Application Services Axis
SSL

Traffic Management/SLB

Firewall/DDoS

Secure Web Gateway

GSLB/DNS

Single Sign-on

User

© F5 Networks, Inc
Application

Web Application Firewall


Application Services Axis
SSL

Traffic Management/SLB

Firewall/DDoS

Secure Web Gateway

GSLB/DNS

Single Sign-on

User

© F5 Networks, Inc
Application

Web Application Firewall


Application Services Axis
SSL

Traffic Management/SLB

Firewall/DDoS

Secure Web Gateway

GSLB/DNS

Single Sign-on

User

© F5 Networks, Inc
Application

Web Application Firewall


Application Services Axis
SSL

Traffic Management/SLB

Secure Web Gateway

GSLB/DNS

Firewall/DDoS

Single Sign-on

User

© F5 Networks, Inc
Application

Data Center Cloud


Converged Systems

On-premises Off-premises
As-a-Service

User

© F5 Networks, Inc
Application

Data Center

Priorities
On-premises •  Expand core market share Off-premises
•  Continue extending into adjacent
markets (SP, Security)
•  Seamless support for Software
Defined Architectures
•  Next generation programmability
•  Management, Orchestration,
Reporting & Visibility
User

© F5 Networks, Inc
Expand Core Market Share

Market Share

49
PERCENT #1
21
PERCENT #1

Total ADC Virtual ADC


Source: Dell’Oro

•  $1.6B Cisco ACE, CSS and GSS replacement program


•  Technology and platform refresh
•  Application and protocol fluency: SIP, FIX, HTTP 2.0, DNS, SSL, …
•  New competitive programs — Citrix and A10

© F5 Networks, Inc
Extend into Adjacent Markets
Leveraging F5 Core leadership to unlock Security and Service Provider TAM

SERVICE PROVIDER

Network App DDoS TCP Network


Firewall Optimization DDoS

Traffic Mgmt CGNAT Parental


DNS & SSL Controls
Security

URL Filtering Policy Diameter


Enforcement Routing

© F5 Networks, Inc
Extend into Adjacent Markets
Leveraging F5 Core leadership to unlock Security and Service Provider TAM

SERVICE PROVIDER SECURITY

Network App DDoS TCP Network Network Access SSL DNS


Firewall Optimization DDoS Firewall Control Security

Traffic Mgmt CGNAT Parental Application Traffic DDoS Web Fraud


DNS & SSL Controls Security Management Protection Protection
Security

URL Filtering Policy Diameter IP Intelligence Secure Web


Enforcement Routing Gateway

© F5 Networks, Inc
Extend into Adjacent Markets
Leveraging F5 Core leadership to unlock Security and Service Provider TAM

GA

$750+M Juniper
Pulse SSL VPN $350M TAM
opportunity

Access Web Fraud


Control Protection

© F5 Networks, Inc
Software Defined Architecture

SDN and SDAS integration: VE Leadership:


•  ALU – Nuage •  Platform independence
SW DEFINED / NFV

•  Cisco – ACI •  Performance/scale


•  HP – VAN •  Breath of application
•  Microsoft – HNV services
•  VMware – NSX •  Programmability

© F5 Networks, Inc
Software Defined Architecture

Two tier Application Services Architecture


PER APPLICATION ADC
SW DEFINED / NFV

Edge Services (HW) Cloud Solution

Advanced ADC Services

Basic HA

© F5 Networks, Inc
Software Defined Architecture
PER APPLICATION ADC

Edge Services (HW):


•  DDoS protection
SW DEFINED / NFV

•  Firewall
•  Coarse traffic management to apps
•  Hardware SSL Acceleration
Cloud Solution

Advanced ADC Services

Basic HA

© F5 Networks, Inc
Software Defined Architecture
PER APPLICATION ADC
SW DEFINED / NFV

Cloud Solutions
•  Cloud Bursting
•  DR solutions

BIG-IP VE – GBB
•  Advanced Per-App ADC
•  Web App Firewall
•  Non-HTTP (e.g., VOIP)
•  App Specific Security

LineRate PointTM Q2
LineRate
Load Balancer
•  Basic Lightweight HA

© F5 Networks, Inc
Software Defined Architecture

VOLUME LICENSING SUBSCRIPTION •  Simplified Per-Application Subscription Licensing


•  Blocks of 100, 200, 400 and 1000
PER APPLICATION ADC
SW DEFINED / NFV

Q2

BIG-IP VE Best - MaxG

Price & Features per unit


BIG-IP VE Better - 3G

BIG-IP VE Good - 1G

LineRate PointTM LB - 250M & 1G

© F5 Networks, Inc
Volume Licensing Subscription
Enabling customers to add ADC services to all applications

Private/Public
Flexibly deployable on both private and public clouds
Cloud

…with Premium Support and software upgrades included


Support

…in 1 and 3-year subscription increments

…all managed via BIG-IQ

© F5 Networks, Inc
Next Generation Programmability — Node.js
Capture today's iRules authors as well as tomorrow's full DevOps authors

PROGRAMMABILITY LEADER EXTENDING TO NODE.JS LINERATE AND BIG-IP

•  80% of F5 customers •  18M+ Developers WW •  LineRate PrecisionTM GA


deploying iRules Storefront & AWS available
•  7M Developers using node.js
•  Self-service Proxy for DevOps
•  32% of all virtual servers have
an iRule attached •  100k+ Node.js packages
•  Launching iRules Language Q3
Extension on BIG-IP
•  166k DevCentral users
•  Bringing Node.js community
•  82k users participating in to DevCentral
DevCentral iRules community

Source: iHealth 2014 Data Source: Developer Population & Demographic


Study, 2013 - Evans Data Corp

© F5 Networks, Inc
Application

Data Center Cloud

On-premises Off-premises

User

© F5 Networks, Inc
Application

Cloud

Priorities
On-premises •  Capture Tier-1 cloud providers Off-premises
•  Joint demand creation programs
•  Service Creation
•  Sales compensation neutrality

User

© F5 Networks, Inc
Service Creation with VMware vCloud Air

© F5 Networks, Inc
Examples of Service Creation Opportunities

Web Application Firewall Anti-DDoS Application Acceleration Traffic Management/LB


as-a-Service as-a-Service as-a-Service as-a-Service

© F5 Networks, Inc
Sales Compensation

© F5 Networks, Inc
Application

Data Center Cloud


Converged Systems

On-premises Off-premises

User

© F5 Networks, Inc
Application

Converged Systems

Priorities
On-premises Integrate and bundle Synthesis with: Off-premises
•  FlexPod
•  HP CloudSystem
•  Microsoft Cloud Platform System
•  Vblock – VCE

User

© F5 Networks, Inc
Application

VIDEO
Converged Systems
Microsoft Cloud Platform System
On-premises Off-premises

User

© F5 Networks, Inc
Application

Data Center Cloud


Converged Systems

On-premises Off-premises
As-a-Service

User

© F5 Networks, Inc
Application

Priorities
•  Global expansion
•  Defense.net (anti-DDoS)
•  New offerings
•  Hybrid solutions

On-premises Off-premises
F5 Silverline

User

© F5 Networks, Inc
F5 Silverline Subscription Services

Q3
Additional
Services
GA
Web
Application
Firewall
Defense.net
Versafe
Secure Web
Gateway

IP Intelligence

© F5 Networks, Inc
Application

Data Center Cloud


Converged Systems

On-premises Off-premises
As-a-Service

User

© F5 Networks, Inc
Application

Data Center Cloud


Via on-premise solutions Through marketplaces

On-premises Off-premises

Converged Systems As-a-Service


As a part of integrated Delivered on a subscription basis
ecosystem stacks from the F5 cloud - F5 Silverline

User

© F5 Networks, Inc
Application

Hybrid Application
On-premises
Services Off-premises

User

© F5 Networks, Inc
5 Hybrid Application Services

4 Software Defined Application Services

3 Cloud Ready

2 Broadened Application Services

1 Application Delivery Controller

© F5 Networks, Inc 60
USE CASE!
Hybrid Data Center

•  Extend application to the cloud!


•  Maintaining IT compliance!
•  Transition to Opex model!

© F5 Networks, Inc
Data Center Public Cloud

© F5 Networks, Inc
Traffic
SSL Accel. SSO
Mgmt.

Services
Anti-

DDoS AIM WAF Fraud

ScaleN

Data Center Public Cloud

BIG-IQ

© F5 Networks, Inc
ScaleN ScaleN
CLOUD

CONNECTOR

Data Center Public Cloud

BIG-IQ & App Orchestrator

© F5 Networks, Inc
USE CASE!
The “New” Enterprise Perimeter

•  Hybrid application and user perimeter!

•  Identity is the new perimeter!

© F5 Networks, Inc
APPS

IDENTITY
WORKER

Data Center Public Clouds SaaS

Remote User

© F5 Networks, Inc
Cloud
Connector
APPS

IDENTITY
WORKER

Data Center Public Clouds SaaS

Remote User

© F5 Networks, Inc
Cloud
Connector
APPS

IDENTITY
WORKER

Data Center Public Clouds SaaS

F5 Silverline
Colocation Facility

Remote User

© F5 Networks, Inc
Significant Growth Opportunity - FY2015 TAM

$10
$12 Billion
Billion
Core Traffic Mgmt Security
App Services Mobility

Hybrid Application
FY2014

Services
As-a-Service
Cloud

© F5 Networks, Inc
DELIVER.!
EXPAND.!
INNOVATE.!
© F5 Networks, Inc
Solutions for an application world.

© F5 Networks, Inc
F5 Technology
and Product Roadmap

Karl Triebes
EVP of Product Development
and Chief Technical Officer
Why is Availability so Important?

Application

Optimization Security Programmability Scalability

Availability

Network
F5 Architectural Advantage
BIG-IQ BIG-IQ BIG-IQ BIG-IQ VMware
Security™ Device™ ADC Cloud™

Cisco

Plugin Ecosystem
BIG-IQ Platform™
Microsoft
BIG-IP® BIG-IP® BIG-IP® BIG-IP® BIG-IP® BIG-IP® WebSafe BIG-IP® BIG-IP®
Carrier Policy Enf. Local DNS Accel- Application (Versafe) Advanced Access
Grade NAT Manager Traffic Modules eration Security Firewall Policy OpenStack
Manager
AWS

Open
Connector
Programmability

TMOS Manageability
Operating System
Core Protocols

Performance/Scalability

Fabric

Appliances Chassis Software Cloud


HIGH-PERFORMANCE !
SERVICES FABRIC!
TMOS – The Application Proxy Platform
State of the art building blocks

Programmability Proxy and Scalability


Performance
and Management Protocols & Fabric

•  iRules •  High Performance micro- •  Full High performance •  Scale-N Fabric


kernel L4-7 Network stack
•  iControl •  vCMP for multi-tenancy
•  Modular architecture •  Web Proxy (HTTP)
•  iStats •  Virtual Editions
•  CMP / vCMP /EvCMP •  Custom proxies via
•  iCall •  Manageability through
iRules
•  Chassis and Appliance APIs/BIG-IQ
•  iApps
•  Application optimizations
•  Hardware offload with •  Flexible licensing options
•  Node.js
custom FPGAs •  Protocol tunneling
support (SDN & others)
•  Custom protocols
support
CLOUD SCALING!
F5 SDAS Fabric Architecture

SDAS Application Control Services


iCall iRules iControl iApps iStat mRules Node.js

ScaleN Fabric Management and Application Services -TMOS

Scale Up Cloud Services Cloud and Device Scaling Multi-tenant Services


Azure

KVM AWS

VMware HyperV
Xen

CMP (SuperVIP) Device and VE vCMP &


VIPRION Chassis Virtual Editions Clustering Elastic vCMP
Advantages of F5’s Patented ScaleN CMP Architecture

Devices

Switch

Switch
DAG

DAG
HSB

HSB
Servers

Scalability Performance Flexibility


VIPRION C4800

SuperVIP = Flat Network

•  640 Gbps L4
•  640 Gbps L7
•  Target all traffic at single
network or application
•  True virtualization

~3x performance with new


upcoming hardware
Traffic Management
Microkernel
BIG-IP® BIG-IP® BIG-IP® BIG-IP® BIG-IP® BIG-IP® BIG-IP® BIG-IP®
Carrier Policy Local DNS Accel. App. Adv. Access
Grade Enf. Traffic Modules Manager Security Firewall Policy
NAT Manager Manager (GTM) (AM) Manager Manager Manager
(CGNAT) (PEM) (LTM) (ASM) (AFM) (APM)

Programmability
iRules®, iApps®, iCall, iStats, mRules, and iControl®
1 2 1
3 1
4
1
1
2
2
2
3
1
3
2
4
2
4
3
Disaggregator (101)
1 2 3 4

TMM TMM TMM TMM


C P L G A A A A C P L G A A A A C P L G A A A A C P L G A A A A
G E T T MS F P G E T T MS F P G E T T MS F P G E T T MS F P
N MMM MMM N MMM MMM N MMM MMM N MMM MMM
A A A A
T T T T

TMM TMM TMM TMM


C P L G A A A A C P L G A A A A C P L G A A A A C P L G A A A A
G E T T MS F P G E T T MS F P G E T T MS F P G E T T MS F P
N MMM MMM N MMM MMM N MMM MMM N MMM MMM
A A A A
T T T T

© F5 Networks, Inc
Switch Fabric
Dissagregator
Rack Scale VIPRION CPU
NIC
CPU CPU
NIC
CPU
NIC NIC
CPU CPU CPU CPU

NIC NIC
CPU CPU CPU CPU

•  Disaggregation technology CPU


NIC
CPU CPU
NIC
CPU
can be applied at the rack NIC NIC
level or beyond CPU CPU CPU CPU
NIC NIC
•  SuperVIP concept scales CPU CPU CPU CPU

as well CPU
NIC
CPU CPU
NIC
CPU
NIC NIC
•  Datacenter VIP CPU CPU CPU CPU
NIC NIC
CPU CPU CPU CPU
NIC NIC
CPU CPU CPU CPU

NIC NIC
CPU CPU CPU CPU
NIC NIC
CPU CPU CPU CPU
F5 SDAS Fabric Architecture

SDAS Application Control Services


iCall iRules iControl iApps iStat mRules Node.js

ScaleN Fabric Management and Application Services -TMOS

Scale Up Cloud Services Cloud and Device Scaling Multi-tenant Services


Azure

KVM AWS

VMware HyperV
Xen

CMP (SuperVIP) Device and VE vCMP &


VIPRION Chassis Virtual Editions Clustering Elastic vCMP
BIG-IP Virtual Edition
25M 200M 1G 3G 5G 10G
Vmware VSphere
KVM , Community
Xen
Citrix XenServer
Microsoft Hyper-V
Amazon AWS
Instance Disk CPU Throughput
Micro 5 GB 1 Core 25 Mbps
Mega 136 GB 4 Cores 10 Gbps
Available Soon:
•  vCloud Air and Azure also up to 1G •  Supports all Major Hypervisors including AWS
•  10Gbps performance - targeting 40 Gbps
•  Management
•  Automatic Deployment
•  Licensing
•  Integration
F5 SDAS Fabric Architecture

SDAS Application Control Services


iCall iRules iControl iApps iStat mRules Node.js

ScaleN Fabric Management and Application Services -TMOS

Scale Up Cloud Services Cloud and Device Scaling Multi-tenant Services


Azure

KVM AWS

VMware HyperV
Xen

CMP (SuperVIP) Device and VE vCMP &


VIPRION Chassis Virtual Editions Clustering Elastic vCMP
All-active Clusters

Automatic Heterogeneous Scale beyond Load aware and user Migrate/failover at


config sync devices HA pair defined failover application level

Pool of hardware and virtual resources


F5 SDAS Fabric Architecture

SDAS Application Control Services


iCall iRules iControl iApps iStat mRules Node.js

ScaleN Fabric Management and Application Services -TMOS

Scale Up Cloud Services Cloud and Device Scaling Multi-tenant Services


Azure

KVM AWS

VMware HyperV
Xen

CMP (SuperVIP) Device and VE vCMP &


VIPRION Chassis Virtual Editions Clustering Elastic vCMP
vCMP – Multi-tenancy for BIG-IP Services

•  Fully Virtualized instances of BIG-IP software


•  Version independent
•  Fully virtualized and isolated to bare metal
•  All modules can be executed in a single instance depending on hardware
resources
•  Available on all platforms except 2x00 and 4x00 series
•  Flexible provisioning
•  Instances can be sized based on performance requirement and redundancy
requirements
•  Instances can span blades or chassis

© F5 Networks, Inc
Progression Scenario
Growing from min to max capacity

Need more
capacity?

Planned event
– add capacity
just before the
World Cup
Maintenance
preferred
window
Elastic vCMP– Cloud Scale VCMP
Global Elastic VCMP

Global Load DDoS


Balancing Protection

Cloud DAG and DNSaaS


F5 SDAS HYBRID
CLOUD
ARCHITECTURE!
The F5 Hybrid Architecture

Management &
Orchestration

Services Platform
Offering Independence
The F5 Hybrid Architecture

BIG-IQ

Public Cloud

Data Center

Silverline
F5 Hybrid Application Services
On-Premise Everything Limited On-Premise No On-Premise

www.example.com www.example.com www.example.com

Silverline Silverline

Thin-client for a BIG-IP cloud,


can serve some functions locally
BIG-IQ
BIG-IQ Platform

1 Third Party Controller Integration

2 BIG-IP Services Orchestration

3 Centralized Management for BIG-IP


BIG-IQ Platform and Application Services Modules

BIG-IQ Platform Services

Centralized management support Cloud Automation Application Fabric Management


for all BIG-IP Modules and Orchestration for Software Defined Application
Services
BIG-IQ Architecture
Purpose Built Modules for Specific Personas Orchestration Controllers

BIG-IQ BIG-IQ BIG-IQ BIG-IQ BIG-IQ


Cloud Device ADC Security Access

Northbound API Driven Interface

iControl/iApps

Programmability / Management
BIG-IQ Platform
Services Core Services

Performance / Scalability

Southbound API Driven Interface

BIG-IP Fabric
Chassis
Appliances Software Silverline
BIG-IQ DEVICE

§  Device Lifecycle Management


§  Software Lifecycle Management BIG-IQ
§  System & Network Configuration
§  Inventory Backup and Restore
BIG–IQ Device

Images + Status +
Licenses Inventory

Roadmap Priorities
§  BIG-IP Fabric Management
§  Seamless Upgrades BIG-IP

§  Transition from EM by Greenflash BIG-IP

§  Designed for all BIG-IP Customers big and small

© F5 Networks, Inc
BIG-IQ CLOUD

§  Management fabric orchestration


BIG-IQ
§  Public cloud connectors
§  Application elasticity
§  ADC self service management
BIG–IQ DEVICE

BIG–IQ CLOUD

Deploy and Self-service


Provision Portals

Roadmap Priorities
§  Cisco/VMWare
§  Hybrid Services Agent (HAS)
§  Integrations that leverage F5 Value
§  Customer POCs

© F5 Networks, Inc
BIG-IQ SECURITY

§  Policy based firewall management


§  Rule monitoring BIG-IQ
§  Multiuser editing and workflows
BIG–IQ SECURITY
BIG–IQ DEVICE

BIG–IQ CLOUD

Firewall Audit Logs


Policy & Monitoring
Roadmap Priorities
§  Create customer advisory board
§  Application visibility and reporting (AVR)
§  Configuration, support for logging and reporting BIG-IP

§  Full integration with ADC components BIG-IP

§  WebSafe support

© F5 Networks, Inc
BIG-IQ ADC

§  Full ADC Configuration


§  iApp Management BIG-IQ
§  Fine-Grained RBAC
BIG-IQ SECURITY
BIG-IQ DEVICE

BIG-IQ CLOUD

BIG–IQ ADC

Config + App
Roadmap Priorities iApps Visibility
§  Launch ADC LTM – Enterprise deployments
§  Extend with ADC GTM
§  Extend from Network Ops to App Deployment
§  Scalability, Multi-Tenancy BIG-IP
BIG-IP
§  RBAC and Self-Service
§  Distributed and Multi-Device Deployments

© F5 Networks, Inc
SDN TECHNOLOGY
AND ROADMAP!
Circa 2009
Next Generation Data Center Architecture
Management Plane
§  Service provisioning
§  Service orchestration
§  Policy management
§  Status and event management

Management Plane
§  Policy implementation and enforcement
§  Identity management
§  Session management
§  Statistics gathering/aggregation
§  Monitoring

Data Plane §  Traffic management


§  Virtualized services (Vmotion, ESX)
§  Security enforcement
§  Encryption services
§  Optimization services
§  Load balancing
§  Health and status monitoring
Completing the SDN Stack
BIG-IQ BIG-IQ BIG-IQ
Device™ Security™ Cloud™
Management Plane
Software-Defined Data Center

NBI NBI

Control Plane OPEN


SDN Controller REST APIs BIG-IQ

Virtual Networks NVGRE VXLAN ETC…

Service Chaining
Data Plane

LAYER 2-3 LAYER 4-7


SDN Solution Space

Management
Controller Interoperability

BIG-IQ

Control Plane

Data Plane
Network Interoperability

VXLAN NVGRE …
F5 SDAS and Cisco ACI
Intelligent L4-7 Services & Traffic Management

•  ACI Fabric - L2 “link layer” connectivity on spine & leaf architecture


•  APIC con troller provides ACI Fabric Management
•  BIG-IQ provides for F5 Application Service Managenment
•  F5 SDAS provides Stateful L4-7 Intelligence and Traffic Mgmt
F5 SDAS and VMware NSX
Intelligent L4-7 Services & Traffic Management

•  VMware’s NSX solution


•  Provides an overlay fabric
•  NSX Fabric Management / Orchestration system
•  F5 SDAS provides Stateful L4-7 Intelligence and Traffic Mgmt
•  F5 can gateway between phyical and virtual networks
Confidential
OpenStack LBaaS F5 Plugin

2
neutron-server

Community Edition Plugin LoadBalancerPlugin


•  Connects directly to BIG-IP 1
•  Community support for Plugin F5PluginDriver
•  Supports Neutron Havana (impl for LoadbalancerAbstractDriver) 3

•  Download now from F5 DevCentral


SERVICE
PROVIDER
VNF MANAGER
VIM BIG-IQ? SERVICES/APPS

© F5 Networks, Inc
LB AAS
VNF
LTM

DNS AAS

VE
VNF GSLB AAS
GTM
DNS FW
F5 NFV Framework

FW AAS
VNF
AFM DDOS AAS

WAF AAS
VNF
ASM
TMOS

PCEF-LITE
APPLIANCE

VNF BNG-LITE
PEM
DPI -LITE

RA AAS
VNF BYOD AAS
OVERLAY TUNNELS (NVGRE/VXLAN/ETC)

APM FEDERATED
VIRTUALIZATION: RD/CONTAINERS/VCMP/VLAN

AAS

FORWARD
VNF PROXY
SWG
CHASSIS

DRA
VNF DEA
SDC (DIAMETER)
OTHER

VNF MANAGER
SDC EMS
Service Provider Solutions
Building  reproducibility,  documenta4on,  and  portability  into  all  solu4ons  development  
Use case examples
Use Case for product
KEY SOLUTIONS: documentation
Verify
•  Gi Simplify with FW, CGNAT,
PEM, LTM All Inputs
•  FW, Steering & NAT Use Doc / Tech pubs
Cases Test
•  +TCP Optimization
Real-world
•  NFV / SDN PoCs Hype solutions
NPI / Training
Dev training
•  Wifi Offload and VoLTE Solutions
Framework
Marketing
Field / Sales
RA Validation
& testing
Field PoCs and PM
Sales Enablement
SECURITY
Application Delivery Firewall Solution

Synthesis – High-Performance Services Fabric

Network Traffic Web App Access DDoS SSL DNS Web Fraud
Firewall Management Security Control Protection Security Protection

EAL2+
DC FW (in process)
EAL4+ (in process) WAF (in process)
DDoS (in process)
ADCs are the Best Platform for Security

ADC Value
User and
Application
Orchestrated
User and Hybrid
Protocol
On-Prem OR
Cloud
Static

On-Prem

Context Requirements
F5 Proxy Architecture

WAF WAF
Data
Slowloris attack
SQLi HTTP iRule iRule HTTP leakage

Heartbleed SSL iRule iRule SSL


Web fraud
protection
SYN flood TCP iRule iRule TCP
ICMP flood

Network
Firewall
WebSafe
Web application with Malware Detection module
1 2

Page is returned to user with additional,


obfuscated code designed to detect any
User submits request for web page changes to the HTML or page

5 4 3
REAL-TIME ALERT
“WebSafe Malware Detection:
User John_Smith is infected with
generic malware, Zeus 1.2”

Real-time alert is issued if any Page checked for malicious code Malware injects malicious code,
page modifications or injections by the injected JavaScript additional fields into page
are detected component
Security Roadmap
APM Versafe AFM ASM
Identity & Access Anti-fraud Firewall Web Application FW

•  Federation and access •  Advanced anti-fraud •  Gi FW for SP •  WAFaaS


management for on- capabilities
prem and cloud apps •  Advanced DoS •  L7 DDoS
(SAML, OAuth) •  Full integration with capabilities
BIG-IP & BIG-IQ •  Versafe Integration
•  SWG - Outbound •  Data center IPS/IDS
•  Risk assessment •  Indentity based policy
services footprint (URL •  Micro-segmentation management
filtering, visibility) •  Mobile device support (east-west traffic)
(MobileSafe) •  L7 IPD/IDS
•  APMaaS •  Indetity based policies
•  Integration with third- •  Advanced Security
•  SWGaaS •  High performance rules Services
party solutions
•  AFMaaS

Centralized Management & Reporting


Advanced Security Services Roadmap

•  Behavioral DoS analysis L3-7


•  Behavioral analysis for non-http (web) protocols
•  Risk assessment and user reputation
•  Analytics and event correlation
•  Bad actor feeds - IP and fingerprinting
•  Application discovery and automatic policy building
•  Exploit and vulnerability information share
On-Premise/Off-Premise Security
INCOMING TRAFFIC

Statistics
Defense.net Statistical Model
F5 Silverline DDoSaaS
Analytics
Service
Scrubbed Upstream
Data In Signaling

Customer Datacenter
AFM ASM
On-premise
Applications
HARDWARE
Scalability and performance of F5 “Fabric”
Flexible performance levels and On-Demand Scalability VIPRION
4800
20M L7 RPS
10,000,000 10M L4 CPS
320/640G L7/L4
VIPRION TPUT
4480
9,000,000 10M L7 RPS
5.6M L4 CPS
160/320G L7/L4
L7 Requests Per Second (Inf-Inf)

TPUT
8,000,000
VIPRION
2400
7,000,000 8M L7 RPS
4M L4 CPS
320G L7/L4
TPUT
6,000,000

5,000,000

4,000,000
VIPRION
BIG-IP 10000s/10200v 2200
3,000,000 2M L7 RPS
1M L4 CPS
4M L7 RPS
BIG-IP 5000s/5200v BIG-IP 70000s/7200v 2M L4 CPS
40/80G L7/L4 TPUT
1.5M L7 RPS 1.6M L7 RPS 160G L7/L4
700K L4 CPS 775K L4 CPS TPUT
2,000,000 BIG-IP 4000s/4200v
20/40G L7/L4 TPUT
20/40G L7/L4 TPUT
850k L7 RPS
BIG-IP Virtual Edition BIG-IP 2000s/2200s 300K L4 CPS
325K L7 RPS 425K L7 RPS 10/20G L7/L4 TPUT
1,000,000 100K L4 CPS 150K L4 CPS
5G L7/L4 TPUT
10G L7/L4 TPUT

0
BIG-IP Virtual Edition BIG-IP 2000 Series BIG-IP 4000 Series BIG-IP 5000 Series BIG-IP 7000 Series BIG-IP 10000 Series VIPRION 2200 Series VIPRION 2400 VIPRION 4480 VIPRION 4800
HW Accelerated DDoS Protection

UDP Flood
2x Competition

ICMP Flood
10x Competition
Blended Attacks
100 + new DDoS TCP Syn-Flood
Attack Vector 16x Competition
Control options in
Hardware
Software Defined Hardware
DDoS S/Gi Network Security for Service Application Cloud
Protection Simplification Providers Services Bursting DevOps

Secure LTE Intelligent Cloud Cloud


Mobility Roaming DNS Scale Federation Migration

DNS
IP
Cache
Intelligence CGNAT
Access
Control Tunnel
DOS ePVA
Vectors Fast L4 Acceleration

F5 Platform
Break
Sales Update

Dave Feringa
Executive Vice President
of Worldwide Sales
Sales Go To Market

ADC SECURITY

SDDC AND CLOUD SERVICE PROVIDER

© F5 Networks, Inc 131


Sales Go To Market – ADC

ADC

•  Continue to increase market share


•  Leverage
•  BIG Data Tools
•  Cisco Refresh Opportunity
•  Develop partnership with Cisco and
VMWare
•  Sell Professional Services With GBB

© F5 Networks, Inc 132


Sales Go To Market – Security

SECURITY

•  Established Focused Security Sales


Overlay Team
•  Increase Number of Security SE’s
•  Launched Versafe and Silverline at ISC
•  Continued Channel Programs “Vault”
•  Incentives to Sell BEST and
Subscription Services

© F5 Networks, Inc 133


Sales Go To Market – SDDC and Cloud

SDDC AND CLOUD

•  Launched Dedicated WW team for


CLOUD
•  Focus Cloud License Program (CLP) to
top 50 CLOUD Providers WW
•  Kickers for VE’s Sold in Every deal to
Enable Hybrid Environment
•  Comp Program Launched for Core
Sales Team to Sell Cloud

© F5 Networks, Inc 134


Sales Go To Market – Service Provider

SERVICE PROVIDER

•  Dedicated SP team in each Theater


•  Traffix: Continue to Drive New Account
Deployment + MPS from Existing
accounts
•  Key Market Focus: LTE, VoLTE, PEM,
CGNAT, GI FIREWALL, GI
Consolidation, NFV, Traffic Steering

© F5 Networks, Inc 135


Big Data Sales Tools

BOAT
(Blackspace Opportunity Assessment Tool)

CAR
(Customer Asset Report)

PIPELINE HEALTH
DASHBOARD

PREDICTIVE WHITE SPACE


ACCOUNT SCORING

© F5 Networks, Inc 136


Big Data Sales Tools

BOAT/CAR

•  Provides detailed analysis of installed


base by territory and customer
•  Tech Refresh, Module Usage, Upgrade
Opportunities
•  Key Channel enabler

© F5 Networks, Inc 137


Big Data Sales Tools

PIPELINE HEALTH DASHBOARD

•  Consistent daily snapshot of pipeline


metrics
•  Shows pipeline growth, velocity of
deals, comparative periods, overall
health
•  Used daily by management team and
the field
•  Ensure we have adequate pipeline to
reach revenue growth targets

© F5 Networks, Inc 138


Big Data Sales Tools

PREDICTIVE WHITE SPACE


ACCOUNT SCORING
•  Provides recommendation and scoring
to target net-new customers
•  Reduces time spent evaluating
whitespace accounts by ranking the top
likely F5 customers based on a their
score
•  Big step forward in furthering the goal of
territory optimization
•  Rolling out to teams in FYQ2

© F5 Networks, Inc 139


Key WINS
Major Customer Win – ACE Replacement Plus Security
Products Qty 4 VPR4800 with 4340 blades running LTM, ASM & AAM
Qty 4 VPR4800 with 4340 blades running LTM, AFM & IPI
Qty 2 BIG-IP4200v with ”Better” bundle

Services Premium (production) & Standard (non-production) support services


Professional implementation services delivered by Guardian Partner

Value $4M for first two orders combined (ACE Replacement and DDOS)

Customer •  Migrating off of ACE infrastructure


Business •  On-going issues related to security breaches, HIPPA compliance
Challenges •  Inadequate defense measures, on going DNS and DDoS attacks
•  The need for standardization and consolidation

Why F5 Won •  Demonstrated technical excellence superior performance


•  Could consolidate ADC and Security in Single Platform
•  Guardian Partner’s relationship with customer’s Information Security Group
•  We had a stronger overall solution vs Citrix

© F5 Networks, Inc 141


Major Customer Win – Service Provider
Products BIG-IP 10000s x100 in phase 1, possible additional 100 units in phase 2

Services L1-L3

Value $4.8M in phase 1, possible additional $4.8 in phase 2

Customer •  Customer needed a solution to optimize smart phone traffic to and from the internet
Business •  Initially customer was hesitant to adopt traffic steering/optimization solution
Challenge •  Due to huge increase in smartphone traffic they finally decided to implement this solution

Why F5 Won •  Deep account penetration and communication with the Customer’s core team
•  Initial performance requirements met, additional benefit of upgrading performance to 10200v
platform
•  Close cooperation with the SI partner who could offer a proven optimization solution from
partnership with F5 in different SP customer
•  Flexible traffic handling (iCall and iRules used for adaptive Traffic Steering)
•  Plan for TCP optimization on BIG-IP in second phase of the project
•  Same customer has also purchased AFM for Firewall solution in different system

© F5 Networks, Inc 142


Major Customer Win – SP Firewall
Products (90) AFM 5200’s w/ BigIQ 7000-M

Services 3500+ hours Consulting Services, On-Site Training, Premium Plus

Value 2x $2.5M

Customer •  EOL Check Point FW’s, underperforming, and costly to maintain


Business •  Data Center Footprint at a Premium, Explosive Growth
Challenge •  Multiple version of code being managed, many of which are not up to standard levels
•  No v6 Support, lack of virtualization, inefficient NEC Environmentals (power, space, cooling)

Why F5 Won •  Reduce Footprint from 9u to 1u, 75% power savings


•  Performance allows them to handle huge growth requirements
•  Standard Code Base and Operations methods consistent with BIG-IP implementation
•  Professional services to assist and complete the migration in a timely manner, off-loading Ops
Team

© F5 Networks, Inc 143


Major Customer Win – Traffix
Products Traffix SDC Diameter - Phase 1 (IPX January/2014) + Phase 2
(Wi-Fi Offloading June/2014)

Services Project Management, Implementation and Consulting Services

Value $1044K Traffix plus $375K BIP

Customer •  Customer Entering 2 New Markets: IPX and WIFI Roaming


Business •  IPX: Needed Standard way to facilitate LTE Roaming amongst different providers
Challenge •  WIFI: needed roaming authentication bridging WIFI with 3G/LTE
•  DDoS and Access Protection for Both Services

Why F5 Won •  F5 Could Provide Highest Performing, most Functional Diameter Implementation that could
solve both business cases
•  SDC WIFI Authentication Module
•  Combination with BIGIP AFM provided Needed DDoS protection
•  Desire to work with Top DRA provider – experience with implementations
•  Great ITC visit, the customer was highly impressed

© F5 Networks, Inc 144


Major Customer Win – SDN Solution
Products 2x VIPRION C2400 + 2xVPR Best Licenses + 4xBLADES B2250

Services $380K includes 170 Days of On-site Consulting

Value $438K , more than $1.5M in Follow On Business

Customer Increase productivity & revenue by


Business •  Increasing Application SLA : Take Application Control/ Ownership back
Challenge •  Shortening application deployments

Why F5 Won •  Exec Sponsorship


•  SDN features, integration and ecosystem with Microsoft
•  Cross Theater coordination – Joint actions on all entities
•  Security and Consolidation opportunity due to Cisco’s LB decision
•  F5 Synthesis – scale, secure, monetize

© F5 Networks, Inc 145


Major Customer Win – Subscription-Based Malware Protection
Products Websafe & Mobilesafe

Services WebSafe and MobileSafe for all customer business units (7 countries)

Value $1.6M - 2 year Subscription

Customer •  Multi Country EMEA Bank under heavy attack for 18 months
Business •  Substantial monetary losses due to Fraud
Challenge •  ECB (European Central Bank) recommendations for Malware detection on customer side

Why F5 Won •  Successful POC and production Pilot – live attacks during POC
•  Good detection rate for Malware and Phishing attacks
•  Stopping ~3 attacks a day, over 1000 each year
•  Multiple Countries, Clientless Implementation. No Changes to Their Web Site

© F5 Networks, Inc 146


Major Customer Win – Cloud-based DDoS Protection
Products Silverline DDoS Protection

Services NA

Value $90,000 per Year

Customer •  Frequent, often weekly DDoS attacks


Business •  Unhappy with existing solution: Prolexic’s Incomplete Reporting & Poor Customer Service
Challenge

Why F5 Won •  Deep DDoS experience of team


•  Transparent communication and reporting capabilities before, during and after DDoS attacks
•  Proprietary DDoS scrubbing technology

© F5 Networks, Inc 147


Major Customer Win – DoD VE Private Cloud and SDN
Products BIG-IP VE 10Gbps Best ELA and BIG-IQ

Services F5 Implementations and Consulting Services

Value $1.5M ELA and $200k+ in services

Customer •  Software Defined Application Services (SDAS) integrated with both VMware and Cisco SDN
Business solutions
Challenge •  Private Cloud hosting Thousands of Apps
•  Multi-tenancy and micro-segmentation security requirements
•  Complex authentication requirements

Why F5 Won •  Synthesis vision, open standards and programmability, and F5 industry partnerships
•  F5 partnership and integration support for both VMWare NSX and Cisco ACI
•  F5 delivery of traditional firewall and web application firewall capabilities (Bought BEST)
•  Our ability to rapidly construct a volume licensing consumption model
•  F5 support for SAML and advanced DoD authentication requirements
•  Our DoD certifications (UC APL, Common Criteria, FIPS)

© F5 Networks, Inc 148


Services Update

Julian Eames
Executive Vice President,
Business Operations
SERVICE
FINANCIALS!
© F5 Networks, Inc
Service Revenue
900
796
800

700 682

600 559
MILLIONS

500
430
400
321
300 247
197
200

100

0
2008 2009 2010 2011 2012 2013 2014

© F5 Networks, Inc
Deferred Service Maintenance Revenue
700

600

500
MILLIONS

400

300

200

100

0
2005 2006 2007 2008 2009 2010 2011 2012 2013 2014

© F5 Networks, Inc
iHealth Uploads and AskF5 Views

PERCENTAGE GROWTH FROM Q4 FY12 TO Q4 FY14

Units Under Unique AskF5


38 %
Service Obligation 59 %
Pages Viewed

Total Cases QKview Uploads


28 %
Opened 181 to iHealth

© F5 Networks, Inc
DevCentral

165,000 DC Membership (Up 33% YoY)

421 iRules in Codeshare

600,000+ Technical Article Views

© F5 Networks, Inc
CUSTOMER
SATISFACTION!
© F5 Networks, Inc
Global Customer Satisfaction Year-over-Year

9.5
9.3 9.3
9.2 9.2 9.2

9.

8.5

8.

7.5

7.
FY2010 FY2011 FY2012 FY2013 FY2014

© F5 Networks, Inc
FY14-Q4 Professional Services Customer Satisfaction

10.00 9.61
9.45 9.34 9.30
8.77 8.95
9.00

8.00

7.00

6.00

5.00

4.00

3.00

2.00

1.00

0.00
Scheduling process Professionalism Punctuality Attention to Detail Skill Level Overall Satisfaction

© F5 Networks, Inc
GLOBAL
SERVICES SALES!
© F5 Networks, Inc
•  Turnkey end-to-end solutions
SERVICE •  Tight integration with incumbent
PROVIDER! PCRF provider
•  Diameter routing nodes,
geographically redundant
•  Support all Policy traffic (Gx)
•  Competitive displacement of
Oracle/Tekelec

Results
$9.1M Product
$1.9M Consulting
$1.4M Maintenance
© F5 Networks, Inc
•  Carrier grade platform delivers
CABLE TV flexibility and programmability
OPERATOR! •  Lower cost than traditional carrier
grade vendors
•  Deployed PEM, CGNAT, GTM,
AFM, and LTM
•  Strong collaboration with Dimension
Data and Cisco

Results
$1.8M Product
$176K Consulting

© F5 Networks, Inc
•  Accelerated refresh of F5 environment
LEADING •  Realized a 3 year cost reduction of
FINANCIAL $13M

INSTITUTION! •  Introduce flexibility of incorporating a


hybrid model as future phases are
fully deployed.
•  Competitive win against A10

Results
$1.5M Consulting Services &
Training
$7.7M to F5 including PS Services
and Support. (3.6M P&I)
© F5 Networks, Inc
•  F5 Emergency Response Team
PERSONAL engaged
LINES •  Provided plan for APM deployment

INSURER ! •  Rolling out SAML integration


•  Services driving Best module adoption

Results
$4M Product

© F5 Networks, Inc
•  On-going Cisco ACE migration
GLOBAL •  Project Definition Workshop ensures
FINANCIAL alignment across worldwide data
centers
SERVICES •  Deployed ASM for credit card
FIRM! processing
•  IP harvested into Migration Tool

Results
$5.625M Including PS Services
and Support. ($4.5M P&I)

© F5 Networks, Inc
F5 SILVERLINE!
© F5 Networks, Inc
Silverline – Delivering Cloud Based Services
•  Provide incremental revenue selling hybrid BIG-IP fabric via existing channels.
Strategy •  Develop new revenue streams selling Silverline “a la carte” through cloud and SP
channels.

Value Proposition Differentiation


•  Cloud Based offerings delivering flexible •  Enhance F5 ‘On Premise’ products and
best in class services solutions
•  Hybrid model complimenting F5 on •  Single vendor Hybrid offering
premise products & solutions
•  Present Opex vs Capex options
•  Innovation, technical leadership and
Product development •  Seamless experience of hybrid
deployment and management
•  F5 customer satisfaction culture >9.0

© F5 Networks, Inc
F5 Silverline Subscription Services

Q3

Additional
Services
GA

Web
Application
Firewall
Defense.net
Versafe
Secure Web
Gateway

IP Intelligence

© F5 Networks, Inc
Vision of Success

•  Deliver robust service delivery infrastructure


•  Achieve/exceed incremental revenue / margin goals for all Silverline
services
•  Positive acceptance from customers, partners and analysts
•  Utilizes all available F5 products in delivery mechanisms
•  Achieves >9.0 customer satisfaction for all Silverline services
•  Delivery product pull through of revenue value

© F5 Networks, Inc 168


UNITY PARTNER
SUPPORT MODEL!
© F5 Networks, Inc
UNITY Partner Support Re-Launch

•  Rewards  for coverage of support services


•  Solution sales and the percentage of support services Partners deliver.
•  Technologies will be more accessible
•  Partners can sell and deliver support to the full breadth of our product areas.
•  Recognizing Partners performance with generous rebates
•  The better they sell and deliver support services, the greater the rewards.

© F5 Networks, Inc
UNITY Partner Support Program

Simplicity Profitability Visibility


Easier to sell and deliver Higher rewards and Ability to compete based on
services earning potential value and performance

Free up F5 resources Increase F5 product sales Grow top organizations

© F5 Networks, Inc
GUARDIAN
PROFESSIONAL SERVICES PROGRAM!

© F5 Networks, Inc
GUARDIAN Professional Services Program Benefits

Educate Enable Endorse Elevate


•  Early access to technical •  Bill of materials for •  Visibility on F5 website •  Access to best practices
training packaged offerings •  Incentives for co-branded •  Joint media opportunities
•  Access to PS technical •  On-request access to success stories
forum assets F5 PS assistance
•  Discount on F5 technical •  Price break on
training certification exams

© F5 Networks, Inc
GUARDIAN PS FY15 – Accelerate Adoption
•  Grow membership from 16 – 55 Partners – Triple the membership

•  Management and execution transitioned to the field

•  Identified key strategic Partners WW to develop into the Program

•  Continue to listen and develop program to support F5 strategic direction

© F5 Networks, Inc
PS Strategic Initiatives FY2015
TECHNOLOGY PORTFOLIO CHANNEL OPERATIONS SALES

Strategic Alliances Workshops Increase number Certifications Strategic Account


of GUARDIAN Focus
Cisco Assessments partners Consultant
Development Engagement Models
VMWare Upgrades &
Migrations Extend SOC Sales Channels
Enhance GUARDIAN
GBB module Program Remote Services Skills
Emerging adoption
Technologies Relationship External PS Delivery Margins
Partners
Silverline Training
Drive Efficiency
Cloud Promotion (PSA Tool)
SP Utilization

© F5 Networks, Inc
CUSTOMER FINANCIAL
SATISFACTION RESULTS

BUSINESS PARTNER
MODELS GROWTH

© F5 Networks, Inc
FY15 GLOBAL SERVICES PRIORITIES
Solutions for an application world.

© F5 Networks, Inc
F5 Alliances

Calvin Rowland
SVP Business Development
F5 Synthesis Partner Ecosystem
SDN Cloud Security Orchestration Application Service Provider
SDN Application Policy Intelligent Hyper-V NSX,
Infrastructure Management System
System Center Virtual vCenter Orchestrator
(IMC),
Controller (APIC), Machine Manager (vCO)
VAN Resource (SCVMM)
UCS Director (UCSD)
Automation Manager

Cloud Intercloud Enterprise Cloud Azure, vCloud Air


Services (ECS)
Cloud Platform
System (CPS)

Other SourceFire Atalla, Office 365 vCloud Automation


Center (vCAC),
ArcSight,
AirWatch, Horizon
Tipping Point,
(VDI)
WebInspect
SDN
Completing the SDN Stack
BIG-IQ BIG-IQ BIG-IQ
Device™ Security™ Cloud™
Application Plane

NBI NBI
Software-Defined Data Center

Control Plane OPEN


SDN Controller REST APIs BIG-IQ

Virtual Networks NVGRE VXLAN ETC…

Service
Data Plane Chaining

LAYER 2-3 LAYER 4-7

© F5 Networks, Inc 182


Cisco ACI + F5 Integration
Applications
SDAS SERVICES

Data Plane Control Plane Management Plane

Programmability

Virtual Edition Appliance Chassis

ACI Fabric

© F5 Networks, Inc 183


HP IMC/VAN and F5 Management Integration
Automated policy-based single pane management from app-to-network-to-user

•  Characterize
Instantly identify all converged
infrastructure requirements

•  Virtualize
Virtualize application, network, and
server resources

•  Orchestrate
Rapidly deploy application, network,
and system configurations

© F5 Networks, Inc 184


Hyper-V Network Virtualization Gateway
Data Center

•  Market Situation Tenant 1 VSID 01 Tenant 2 VSID 02 Tenant 1 VSID 01 Tenant 2 VSID 02

•  HNV is the Microsoft’s SDN technology


comes with Windows Server 2012 R2
•  L4-7 Services need to be implemented
in HNV environment Hyper-V Hyper-V

•  Customer Benefit with F5 Host 1


10.0.27.10
Encapsulated
network
Host 2
10.0.27.20
•  F5’s HNV gateway enables L4-7
services for tenants’ network SCVMM with
BIG-IQ Plug-In
•  High performance and scalability HNV Gateway +
Application Services
•  Integration with System Center
automates VM network changes
Users

BIG-IP Platform

© F5 Networks, Inc 185


F5 Reference Architecture for VMware NSX
Admin

•  Operational agility at the network services


(Application Delivery Networking [ADN])
layer
Cloud Management
& Orchestration
•  Operational agility for application-specific
services for acceleration, availability, and
security (a rich Layer 7 protocol)
NSX
Manager
•  Delivering a consistent consumer Generic
experience without consuming IT resources NSX Management Platform

better spent
on strategic projects iApps

Application Services

BIG-IQ Cloud and BIG-IQ Device


BIG-IP Local Traffic Manager
User NSX
NSX Application
Edge vSwitch
Workloads
BIG-IP Generic
Simplified Business Models Platform Platform

Deploying L3–L7 Services

© F5 Networks, Inc 186


Cloud &
Hybrid Cloud
Hybrid Cloud - Simplify. Scale. Secure.
Hybrid Infrastructure

Physical Data Center


Corporate
Tier 1: Global DNS and Protecting L3-4 Tier 2: App Delivery and AAA Tier 3: Database
Users
Global DNS Services Application Availability
+ Network Firewall Services + Health Authentication
Customers

Attackers ISP Can inspect


SSL at
either tier Database
BIG-IP Platform BIG-IP Platform Directory
Remote Services
WAN Virtual network encapsulating
Employees + IP Intelligence (IPI) Module
Optimization technologies (VXLAN and GRE)
Office 365

Virtual Data Center


SaaS Provider
Tier 1: Global DNS and Protecting L3-4 Corporate Tier 2: App Delivery and AAA Tier 3: Database
Users
Global DNS Services Application Availability
+ Network Firewall Services + Health Authentication

Database
Generic Platform Generic Platform Directory
Services

Cloud Hosting Provider


Distributed
DNS/GSLB On-Demand Computing
Application Services

Generic Platform

© F5 Networks, Inc 188


AWS Cloud Migration Map Diagram
On-Premises Infrastructure

DNS Services

GTM
Production/Staging
Development
Team
BIG-IP Platform

Application Services

LTM Developer

BIG-IP Platform
Developer
Cloud Management and Orchestration
User

Orchestrator Code
Repository
Developer
Beta User
BIG-IQ Cloud Virtual Edition

Simplified
Business Models
Application Services Tester GOOD BETTER BEST
Development/Testing
LTM

VE GTM BIG-IP Global Traffic Manager


LTM BIG-IP Local Traffic Manager
BIG-IP Virtual Edition
BIG-IQ BIG-IQ Cloud Virtual Edition
Amazon AWS Cloud

© F5 Networks, Inc 189


Azure Virtual Networking

•  Market Situation Utilizing F5 LTM and IPsec,


•  57% of Fortune 500 uses Azure organizations are able to
secure and manage the traffic
•  300K+ Active Websites Virtual Virtual between on-premise data
Web Farm Web Farm centers and the cloud via the
•  250K+ customers use Azure and US WEST - Virtual Network
10.2.0.0/16
network.
adding 1000+ new customers Customers

everyday

•  Customer Benefit with F5 BIG-IP


IPsec w/ with
Tunnel
F5

BIG-IP
BIG-IPw/
Web
Application

•  Provides Secure VPN Tunnel to BIG-IP

Azure for Hybrid deployment


F5

Application
Users Publishing
Web Web
•  Expands L4-7 services to the Farm Farm

applications running on Azure Web

(F5 is running on premise) DATA CENTER - Local Area


Network 10.1.0.0/16
Application

© F5 Networks, Inc 190


How F5 BIG-IP GTM Works with vCloud Air
•  How is it deployed in VMware vCloud Air?
•  1 GTM deployed onsite
•  1 GTM VE deployed in vCloud Hybrid Service
•  GTMs configured as Global Sync Group
•  Can monitor both LTMs in data center and web servers
from vCloud Hybrid Service.

•  Continuous data replication between on prem


and vCloud Hybrid service
•  Routes global app traffic to keep pace with changing
network & user volumes
•  Directs users to nearest data center to provide best
application experience
•  Routes traffic according to business policies.

•  How does Failover work?


•  User Connects to FQDN which is a Wide-IP on GTM
•  GTM monitors both primary and remote sites for
application availability
•  If primary site no longer available, GTM seamlessly
redirects user to failover location in vCloud Hybrid
Service.

© F5 Networks, Inc 191


Office 365

•  SAML to SaaS
•  Policy Driven
•  24/7 Secure Collaboration
•  No ADFS Requirement

© F5 Networks, Inc 192


Converged
Systems
Converged Systems with F5 Services

© F5 Networks, Inc 194


FlexPod Data Center with ACI + F5 BIG-IP LTM
Bringing F5 + ACI L4-L7 Integration benefits to FlexPod Data Center

Demonstrates: Application Policy


ACI Fabric / Nexus 9000 spine / Key Use cases:
leaf
Infrastructure •  Day 0 deployment (manual)
Controller
FlexPod with ACI •  Tenant On-boarding
infrastructure, design and •  Tenant ACI Multi-Tenancy &
deployment of UCS, ACI & Storage
NetApp Clustered Data
ONTAP
APIC •  Virtual & Physical Compute

Components:
L4-L7 Service Integration with •  Nexus 9000 Fabric
F5 BIG-IP LTM •  APIC
•  UCSM 2.2 (El Capitan)
Migration of Standalone •  vSphere 5.1 u1
FlexPod to Fabric mode •  F5 BIG-IP LTM
•  NetApp FAS 8000 with
Manual configuration Hypervisor CDOT 8.2.1
Managers
•  OnCommand System Manager
•  NetApp Snap Manager
Integrated
L4-L7
NetApp Clustered Services Cisco Unified
Hypervisors ONTAP Physical & Computing
Virtual System

© F5 Networks, Inc 195


F5 BIG-IP VCE Vblock Ready Certification Status
“Superna certifies that the F5 BIG-IP is Vblock Ready™. •  F5 BIG-IP Platform is now VCE Vblock ready
Superna has tested the product on Vblock Systems, certified!
verified the product does not result in degradation of •  BIG-IP compatibility with the Vblock infrastructure
Vblock platform performance or availability, and the certified by Superna, third party provider of
product has met the jointly agreed upon entrance, certification services that help IHV and ISVs develop
data center solutions for VCE, EMC, VMware, HP,
integration, and interoperability criteria ”
- Vblock Ready™ Certification Test Plan Report For F5 BIG-IP
Brocade and Qlogic technologies.
•  Certification demonstrates successful integration of
F5 BIG-IP and VCE Vblock platform with an
operationally clean, running Vblock producing no
errors or performance degradations

http://www.vce.com/partners/partner-finder-results.aspx?partnertype=2%2c606%2c608%2c607&partnerspecialization=0&country=united+states&key=F

http://www.vce.com/partners/vblock-ready#f5

© F5 Networks, Inc 196


HP CloudSystem

•  Key differentiators
•  Single services view across
private, public & hybrid cloud
•  Multi-hypervisor, multi-OS,
heterogeneous infrastructure
•  Intelligent automation and
lifecycle management;
application-to-infrastructure
•  Scalability & elasticity

© Copyright 2011 Hewlett-Packard Development Company, L.P.

© F5 Networks, Inc 197


Microsoft - Cloud Platform System (CPS)

•  Market Situation Integra4on  with  System  


• Integrated Systems is a $4B market High Availability +
Center  for  provisioning    
of  F5  Services  
(2013) growing at more than 60% YOY Scalability

(IDC) LTM

•  Customer Benefit with F5


F5  
• High availability and Scalability for both Provider  for    
the tenant applications and the VIPRION Platform SCVMM  

management cluster
• Single management experience

Windows Azure Pack


System Center
through F5 integration with System
Center
• Simplified procurement, deployment, Hyper-V

support experience

Cloud  Pla)orm  System  

© F5 Networks, Inc 198


Conclusion
Ecosystem – Functional View Orchestration

Traffic
SSL Accel. SSO
Mgmt.

Anti-
SDAS DDoS AIM WAF APIC

BIG-IQ
Fraud
Services
vCO

SCVMM
BIG-IP VIPRION Virtual Editions LineRate
OpenStack
Network
ACI HNV CPS VCW
IMC
VAN NSX Azure AWS

© F5 Networks, Inc 200


Application

Hybrid Application
On-premises Services Off-premises

User

© F5 Networks, Inc 201


Business Model Overview /
Financial Outlook

Andy Reinland
Executive Vice President and
Chief Financial Officer
F5: Fiscal Year-End Highlights
Continued Market/Technology Leader in Application Delivery Networking

HEALTHY
REVENUE GROWTH SOLID PROFITABILITY
BALANCE SHEET

•  Revenue up 17% year-over-year •  Non-GAAP Gross margin: •  Strong cash generation


83.4%
•  Sequential growth throughout •  $549 CFO
FY14 •  Non-GAAP Operating Margin:
36.4% for FY14, 37.8% in Q4 •  $526 FCF
•  36% of product sales include
•  Repurchased $651M of
security; up 41% Y/Y •  EPS $5.43, up 18% Y/Y
Common Stock in FY14
•  Virtual edition sales up 49% Y/Y
•  $1.1 billion in cash and
investments; zero debt
•  Deferred revenue: $637 million,
up 20% Y/Y

© F5 Networks, Inc 204


FY2013 v FY2014
Revenue Net Income Cash Flow from Operations Headcount
1800 325
600 4000
$1,732
$311 3,835
1700
$549
300 550

1600
3500
3,355
$500
$277 500
1500 $1,481
275

$Millions
$Millions

$Millions

$Millions
1400 450 3000

250
1300
400

1200 2500
225
350
1100

1000 200 300 2000


FY2013 FY2014 FY2013 FY2014 FY2013 FY2014 FY2013 FY2014

© F5 Networks, Inc 205


Account Penetration
Large Customers Large Customers with > 50 Installs
80% 77% 25%
72%
22%
70% 67%
64% 63%
60% 20% 19%
60% 57%
52% 16%
50% 48% 49%
46% 47%
15% 14%

40%
11%
10% 10% 10%
10% 9%
30%
8%
7%
20% 5%
5%

10%

0%
0%
NA F500 EMEA FT500 APAC G2000
NA F500 EMEA FT500 APAC G2000
FY11 FY12 FY13 FY14 FY11 FY12 FY13 FY14
© F5 Networks, Inc 206
Income Statement Trends
Gross Margin
Revenue (Non-GAAP)
500 465
440 85.0 83.5 84.2 84.2 84.0 84.4 83.9 83.5 83.9 83.4 83.4 83.2 83.5
450 406 420
395
400 363 365 370 80.0
340 353 350
350 322
75.0
300
$ Millions

250 70.0

Percent
200 65.0
150
60.0
100
50 55.0
-
50.0

Operating Margin
(Non-GAAP) EPS
(Non-GAAP)
40 37.8 38.3 38.4 38.6 37.4 38.1 37.8
35.9 35.9 35.4 36.4
34.6 1.57
35 1.60
1.39
30 1.40 1.26 1.22 1.27
25
1.20 1.09 1.14 1.12 1.14 1.07 1.12
1.03
1.00
Percent

20
0.80
15 $
0.60
10
0.40
5 0.20
0 0.00

© F5 Networks, Inc 207


Balance Sheet Trends
Deferred Revenue DSO
650 617 637 60
600 568 588 52 51
520 531 49 49 50 50 49 48 50
550 50 46 46 47
481 491
500 447
450 413 434 40
380
$ Millions

400

Days
350
30
300
250
200 20
150
100 10
50
0 0

Cash Flow from Operations Cash & Investments

200 1,400 1,289 1,266 1,271


170 1,186 1,235 1,128
175 1,200 1,115 1,195 1,1651,120
159 1,107
149 145 148 1,034
150 132 138
126 1,000
$ Millions

113

$ Millions
125
102 800
100 81 82
600
75
50 400
25 200
0 0

© F5 Networks, Inc 208


Revenue Trends by Geography
500
Japan EMEA
450 5%
APAC Americas 5%
6% 14%
400 5%
5% 15%
6% 14%
350 7% 5% 15%
7% 6% 13%
7% 14% 15% 22%
6% 15%
300 15% 16% 23%
$ Millions

14% 24%
14% 22% 24%
250 23% 21%
21% 22%
21% 23%
21%
200

150
59%
59% 56% 57%
58% 58% 56%
100 59% 58% 57% 56% 54%

50

-
1Q12 2Q12 3Q12 4Q12 1Q13 2Q13 3Q13 4Q13 1Q14 2Q14 3Q14 4Q14

© F5 Networks, Inc 209


Security Attach Rates

1,000 Security products included

900
No security products included

800

700
LTM, GTM, PEM, CGNAT,
600
64% Traffix, LineRate,
$ Millions

Acceleration bundles, etc


500 70%
400

300
ASM, APM, AFM, Versafe,
200 SWG, IPI, Defense.net,
36% Security bundles, "Better",
100 30% "Best"

0
FY13 Product Revenue FY14 Product Revenue

© F5 Networks, Inc 210


Headcount FINANCE/OPS
387 (10%)
MANUFACTURING
52 (1%)
PROFESSIONAL
SERVICES
998 (26%)
SALES (QUOTA)
414 (11%)

SALES (SUPPORT)
719 (19%)
PRODUCT
DEVELOPMENT
1,055 (27%)

•  Total HC: 3,835


MARKETING •  Net Change: 480 Y/Y
210 (5%) •  +14% Y/Y

© F5 Networks, Inc 211


4Q14 Results / 1Q15 Targets
Q4 Results Q1 Guidance

Revenue $465.3 $460 – 470

Gross Margin (GAAP) 82.4% ~ 82%

Operating Expenses (GAAP) $235.8 $245 – 253

EPS (GAAP) $1.26 $1.10 – 1.13


EPS (non-GAAP) $1.57 $1.46 – 1.49

Cash Flow from Operations $170 > $180

Tax Rate (GAAP) 37.2% 38.5%

Tax Rate (Non-GAAP) 34.5% 35.5%

Headcount (Net Increase) 90 100 - 125

Dollar amounts in millions except EPS

© F5 Networks, Inc 212


FY15 Planning Assumptions
•  Revenue growth
•  Year over year product revenue growth throughout FY15
•  Sequential revenue growth throughout year off of Q1 base, with traditionally strong second half
•  Non GAAP Gross Margins
•  83-84% range
•  Non GAAP operating margin
•  Similar pattern as FY14
•  Mid 30s range first half, increasing through second half
•  Stock-based compensation expense
•  Q/Q Increase of $5-7M in Q2, Q3 & Q4 consistent with Q2 levels
•  Capital expenditures
•  Approximately $6-12 million per quarter for ongoing infrastructure investments
•  Additional capex of $15-20 in second half specific to facilities expansions in San Jose and Tel Aviv
•  Annual tax rates
•  GAAP: 38.5%; Non GAAP: 35.5%
•  Rates do not assume extension of R&D tax credit

© F5 Networks, Inc 213


Q&A

You might also like