The setup. Cyber earnings week starts Tuesday. Commvault reports before the open. F5 reports after the close. Fortinet reports Wednesday after the close. The market will grade each on software and subscriptions. It should be watching the boxes.
Hardware is carrying the growth. In its fiscal Q3, F5’s systems revenue, meaning the physical appliances, grew 32% to $240 million. Its software revenue grew 7% to $223 million. F5 raised its full-year growth outlook to about 9% to 10% and guided Q4 revenue to $870 million to $890 million. Fortinet’s Q2 product revenue grew 52% to $773 million, and billings grew 33% to $2.37 billion. Fortinet guided Q3 billings to $2.25 billion to $2.35 billion, which it said is 27% growth at the midpoint.
Those are excellent numbers. They’re also refresh numbers. Companies are replacing older firewalls and load balancers, partly to handle AI traffic and data-center build-outs. A refresh is a wave, not a tide. The question for this week isn’t whether Q3 was good. It’s whether management can show the wave keeps going into 2027.
Then Check Point moved. On Monday, Check Point launched Firewall-as-a-Subscription. Customers get the firewall hardware, the threat prevention, cloud management, 24x7 support, and migration services for one monthly or annual payment over three years. No upfront hardware purchase. They can raise throughput at any time and get new hardware after 36 months. It goes on sale through partners on November 1.
Check Point’s own blog spells out the pitch: “We carry the CapEx and keep the hardware title.” In plain terms, the vendor owns the box and rents it to you. The blog says it’s aimed at companies from a few hundred to a few thousand employees, especially ones planning a refresh or a vendor switch.
Read the fine print as strategy. Two details matter more than the headline. First, the bundle includes service credits that cover moving your rules over from “another vendor’s firewall.” That’s a displacement offer. It’s aimed at mid-market shops sitting on aging gear from a competitor, at the exact moment they’d be shopping anyway. Second, Check Point is taking on the financing. That’s a real cost. A vendor only does that when it thinks winning the refresh now is worth more than collecting the cash up front.
Why it matters for the multiples. Investors pay more for recurring revenue than for one-time hardware sales, because it repeats. Turning a box into a three-year subscription makes revenue smoother and stickier. It also means less cash on day one, so short-term billings can look softer even when the business is healthier. If Check Point’s model works, watch for others to copy it, and watch for analysts to start asking how much of each vendor’s product growth is a one-time refresh.
What we’ll listen for this week. From F5: does systems growth hold up, and does FY27 commentary lean on AI data-center demand or on software reaccelerating? From Fortinet: does billings land inside or above its range, and does management say the firewall refresh has more room to run? From both: any mention of customers asking to pay for hardware like a subscription. If buyers are asking, Check Point won’t be the last vendor to offer it.
Our take. The box isn’t dead. It’s the most profitable growth line in network security right now. But the vendors that win the next cycle will be the ones that make the box feel like software to the buyer: no big upfront bill, easy upgrades, and a reason to stay. Check Point just put that offer on the table first. F5 and Fortinet get to answer it on their calls this week.