Francis Pelzer
Analyst · Tim Long from Barclays
Thank you, Francois, and good afternoon, everyone. As we previewed in our preliminary results announcement and as Francois just highlighted, we delivered a very strong Q1. On a GAAP basis, Q1 revenue was $625 million. First quarter non-GAAP revenue of $626 million was up 10% year-over-year and well above the high end of our initial $595 million to $615 million guidance range.
Please note, as I review our revenue mix, I will be referring to non-GAAP revenue measures. Also, this will be the last quarter we speak about non-GAAP revenue as we lap the acquisition of Shape. Going forward, the add-back of the Shape purchase accounting write-down is de minimis.
Q1 product revenue of $289 million was up 23% year-over-year and accounted for approximately 46% of total revenue. This is the strongest product revenue growth we have delivered since Q2 of FY 2011, nearly a decade ago.
As Francois noted, customers accelerating their digital transformation efforts drove growth in both our software and system sales. Software revenue was $111 million, growing 70% compared to the year ago period, which did not include contribution from Shape. Excluding Shape's contribution in Q1 of '21, software revenue grew approximately 35% year-over-year.
Our mix shift continued this quarter with software representing 38% of product revenue in Q1, up from 28% in the year ago quarter. Customers' preference for flexible subscription models continue to fuel our subscription revenue momentum. In Q1, we again drove record subscription volume with subscriptions representing 77% of software revenue in the quarter.
Services revenue of $337 million grew 1% year-over-year and represented 54% of revenue. Revenue from recurring sources, which includes term subscriptions as a service and utility-based revenue as well as the maintenance portion of our services revenue totaled 66% of revenue in the quarter. This is up from 63% in the year ago period. The improvement comes largely as a result of the strong subscription software momentum I mentioned previously.
Systems revenue of $179 million was up 5% compared to last year. Francois will speak to the drivers of this strong performance in more detail. On a regional basis, in Q1, Americas delivered 14% revenue growth year-over-year, representing 55% of total revenue. EMEA delivered 4% growth, representing 26% of revenue, while APAC grew 7% and accounted for 19% of revenue. Looking at our bookings by vertical, enterprise customers represented 67% of product bookings, service providers accounted for 14% and government customers represented 18% of product bookings, including 6% from U.S. Federal.
Let me now share our Q1 operating results. GAAP gross margin in Q1 was 81.6%. Non-GAAP gross margin was 84.4%. GAAP operating expenses were $392 million. Non-GAAP operating expenses were $322 million. Our GAAP operating margin for Q1 was 18.9%, and our non-GAAP operating margin was 33%. Our GAAP effective tax rate for the quarter was 25.1%, and our non-GAAP effective tax rate was 21.7%. GAAP net income for the quarter was $88 million or $1.41 per share. Non-GAAP net income was $161 million or $2.59 per share.
I will now turn to the balance sheet. We generated $137 million in cash flow from operations in Q1. Cash and investments totaled approximately $1.5 billion at quarter end. We did not make any share repurchases in Q1. We remain committed to repurchasing $1 billion in shares over the next 2 years, including $500 million via an accelerated share repurchase program in fiscal year 2021.
DSO was 50 days, and capital expenditures for the quarter were $5 million. Deferred revenue increased 10% year-over-year to $1.4 billion. We ended the quarter with approximately 6,160 employees, up approximately 50 from Q4.
Now let me share our guidance for our fiscal second quarter. Unless otherwise stated, please note that my guidance comments reference non-GAAP metrics. Also, with the Volterra deal recently closed, our Q2 outlook incorporates the addition of their financials to our guidance expectations.
Near term, we expect customers will continue to invest to support application growth and the modernization of their application infrastructures. We also anticipate continued focus on and investment in application security.
With this in mind, we are targeting Q2 fiscal year 2021 revenue in the range of $625 million to $645 million, reflecting year-over-year growth of approximately 8.5% at the midpoint of our range. While we do not give quarterly guidance on product revenue mix, we do anticipate continued near-term strength in systems with Q2 growth likely similar to Q1.
We would also remind you that our prior year Q2 software revenue growth was exceptionally strong at 96%. This difficult comparison is likely to be reflected in our Q2 21 software growth rate being below our Horizon 2 target of 35% to 40%. This is consistent with our commentary about the potential for quarterly variability and software growth rates as we continue to scale our software business. We expect Q2 '21 gross margins of 84% to 84.5%, and we estimate operating expenses of $340 million to $352 million.
As we discussed last quarter, we generally see a seasonal increase in operating expenses in Q2. We expect our Q2 operating margin to decline from Q1 and then to increase in the back half of the year to achieve our FY '21 non-GAAP operating margin target of 31% to 32%. I will remind you once more that our Q2 '21 outlook also incorporates the addition of Volterra into our operating model.
We anticipate our effective tax rate for Q2 will be in the range of 21% to 22%. Our Q2 earnings target is $2.32 to $2.44 per share. We expect Q2 share-based compensation expense of approximately $62 million to $64 million. As for capital deployment, as I mentioned previously, we intend to repurchase 500 million shares via an accelerated share repurchase in fiscal 2021.
With that, I will turn the call back over to Francois. Francois?
François Locoh-Donou: Thank you, Frank. Several quarters into the pandemic, it is growing clearer that COVID has accelerated digital transformation in both business and consumer dependency on applications. As a result, our customers are accelerating their digital transformation investments. Incumbency is also an advantage for us in the current environment. And together, these trends are enabling us to drive strong growth.
Underneath these macro drivers and consistent with our discussion at our November analyst and investor meeting, there are 3 F5-specific growth drivers fueling our demand: one, ongoing software and subscription momentum; two, growing demand for application security; and three, resiliency in system space demand leading to moderating systems revenue declines.
As we noted in November, these multiple growth drivers mean that we also have multiple paths to achieve our Horizon 2 revenue growth targets. More specifically, we do not need everything to go exactly right to achieve our goals. In Q1, we had a lot go right, and customer demand drove growth across all 3 of these drivers. I will speak to each in turn.
First, we continue to see demand for software and subscription consumption across our application security and delivery solutions. I will focus first on our BIG-IP and NGINX solutions. Customers look to BIG-IP to refresh core business applications for capacity additions and to simplify traditional application delivery in cloud environments.
In one example, during Q1, large financial institutions struggled for months to turn up a mission-critical application in a cloud environment. This was despite the best efforts of the cloud provider that we're working with. Frustrated, they turn to F5. In under one day, we help them get the app up and running in the cloud with multiple BIG-IP virtual editions. This use case highlights the customer benefits we have driven as a result of our investment to modernize BIG-IP, making it easier and more efficient to use in cloud environments.
Let me turn to NGINX. At the time of the NGINX acquisition, we deliberately invested in new products, accelerating time to market. Specifically, we built a joint F5 NGINX controller and rapidly ported F5 security to the NGINX platform.
This quarter, NGINX delivered its largest quarter ever with broad-based strength across geographies. This strength was driven in large part by robust NGINX control attraction as well as integrated F5 security through NGINX App Protect.
During Q1, we also secured a win from BIG-IP, controller, NGINX Plus and NGINX App Protect with a long time F5 federal government customer. While upgrading its current BIG-IP infrastructure, this customer also selected NGINX to help prepare for migrating network infrastructure from physical to virtual, while building out capabilities to support continualization. NGINX is leading the way in a number of modern application use cases, including cloud-native load balancing, scaling APIs and delivering Kubernetes applications in production.
As applications continue to get more distributed, we expect the investments we are making to deliver API gateway, API management and service mesh capabilities will drive additional NGINX momentum. It should come as no surprise that customer demand for application security is also growing. With the ongoing pandemics fueling ever-increasing consumer use of digital channels, the threat landscape is growing significantly. With application-based attacks growing both in numbers and sophistication, customers are looking to F5 for help.
The combination of our organic investment and the addition of Shape has created an enhanced F5 application security portfolio. If you map our solution set against the top application security threats, it is clear that we are very well positioned to help our customers address the most frequent incidents and the most damaging breaches.
We continue to see increased interest in adding F5's enterprise-grade web application firewall protection to modern applications. During Q1, a major car manufacturer selected NGINX with App Protect when they needed a cloud-independent, portable, scalable solution that included a container friendly web application firewall.
We also are seeing growing traction for SSL orchestration. This encrypt/decrypt use case is a strategic differentiator for F5. And while it tends not to be a big revenue driver on its own, it is a strategic control point in enterprise customer's security stack, which gives us the ability to pull in BIG-IP security and Shape.
Let me speak also to the traction we are seeing with Shape and, in particular, our Shape Silverline combination. Last quarter, we highlighted the benefit of making Shape's industry-leading anti-fraud solutions available to a much larger customer base, through our Silverline-managed services platform.
Silverline Shape Defense delivers advanced BoT protection to prevent large-scale fraud. Shape AI Fraud Engine or SAFE is a cloud fraud-prevention service. As a combined solution, our Silverline Shape Defense and SAFE solutions enables sparsely resourced organizations to deploy true industry-leading capabilities. Combining Shape's anti-bot and anti-fraud capabilities with Silverline in managed service also makes it easy to quickly deploy Shape's capabilities, which is especially useful when customers are in crisis.
There are 2 interesting use cases that have emerged. First, Shape Silverline Defense is being used by several U.S. states to combat rampant fraud related to unemployment benefits.
The combination of sky-high demand and limited security of fraud capabilities created an ideal environment for fraudsters who are conducting sophisticated attacks against unemployment sites as well as other unprotected state domains. With a Shape Silverline Defense solution, we can go in and offer real data about what is happening, unveiling the true scale of the threat. Once enabled, Shape's sophisticated AI and machine learning capabilities identify and block the fraudsters.
Credit unions also are emerging as an ideal use case for Shape Silverline Defense. With new web and mobile banking capabilities coming online and larger transfer limits being introduced, credit unions can present an easy target for sophisticated attackers. Pressure to provide the same services as big banks is exposing them and their lack of cybersecurity and fraud capabilities. Shape Silverline Defense provides an affordable turnkey, easy-to-deploy managed security and fraud solution as evidenced by the 5 credit union wins our sales teams delivered in Q1 2021.
We are as excited as ever about the use cases Shape has opened for us. Going forward, we see additional potential to leverage Shape's analytics engine to build new analytics offerings that enable us to go beyond application security to drive revenue enhancements for customers.
Finally, let us talk about systems and the drivers for the growth we saw in Q1. First, I will note that our systems business is also benefiting from the macro trends I mentioned previously, namely COVID-driving increased application use and accelerating investment in digital transformation.
Q1 strength in systems was broad-based across geographies and industries. We identified 3 primary factors behind our strong systems performance. First, as we have discussed previously, we have seen growing demand for systems-based security use cases. Second, over the last several years, customers have gained clarity on their cloud strategies and now expect to operate in a hybrid multi-cloud world for some time to come. As a result, they are more willing to purchase systems to support capacity needs driven by accelerating digital transformation. We believe both of these drivers are sustainable. Third, Q1 also benefited from some COVID-suppressed systems catch-up. Customers who have put off systems purchases for several quarters simply can no longer defer growing capacity demands.
For a very small subset of our customers that had not refreshed in a long time, a long-planned April end-of-software development milestone on one of our legacy systems contributed to their desire to act sooner rather than later. For clarity, I would note that end-of-software development is very different than end of support.
In this case, the April milestone pertains to an end-of-software development date that has been well-publicized for years, providing customers a long planning runway. We estimate this catch-up demand drove approximately $10 million in system sales in Q1. We see this as a transient systems growth driver though we do expect it to carry over into Q2.
Finally, while I did not call it out as a growth driver, our expanded reach and role has also expanded our strategic position with customers. This has enhanced our ability to connect with C-level personas and also means we are more often considered for opportunities that span our application security and delivery portfolio, bridging traditional and modern applications in both hardware and software form factors.
As an example, in Q1, one of the United States' leading health care providers selected BIG-IP hardware, software, security and NGINX to keep the critical care applications running nonstop while beginning to migrate to next-generation apps for their care providers. This project reemerged as a priority for the customer after being deferred last February, so the customer can divert all necessary resources to fighting COVID.
In closing, we are encouraged by our momentum and believe we are seeing clear signs that our organic investments and our value-creation methodology for both NGINX and Shape are paying off for customers and investors alike. We were very pleased to announce that our acquisition of Volterra closed yesterday, and the team has already begun the hard work of integration. Initial customer feedback about the combination of F5 and Volterra has been very positive. Customers are excited about the potential of F5's edge 2.0 to eliminate the pain they feel from today's closed edge platforms.
Our edge 2.0 will be the first edge platform built for enterprises and service providers. It will be an open-edge platform that will allow every service to run on any server, virtual or otherwise, inclusive of public clouds. We are very excited to have the Volterra team as part of F5 and are looking forward to sharing our progress with you going forward.
I will wrap up today's prepared remarks by thanking the entire F5 team again as well as our customers and our partners.
With that, operator, we will now open the call to Q&A.