How Cisco Makes its Money: Revenue Breakdown

How Does Cisco Make its Money?

Cisco Systems (NASDAQ: CSCO) is the world’s largest enterprise networking company and a major player in cybersecurity and enterprise software. Cisco generated $53.8 billion in total revenue for fiscal year 2024 (ending July 2024), down 5.6% year-over-year — a decline that reflects a well-understood inventory digestion cycle in its Networking segment rather than structural deterioration. The company reported net income of $10.3 billion and a 61.0% gross margin, characteristics of a business with strong underlying economics.

Cisco’s products and services connect and secure the digital infrastructure of virtually every major enterprise and government in the world. Its switches and routers are in the network closets and data centres of nearly every Fortune 500 company. Its security products protect hundreds of thousands of organisations. And since completing the $28 billion acquisition of Splunk in March 2024 — the largest acquisition in Cisco’s history — it has become one of the largest providers of security analytics and IT observability software.

The defining strategic story at Cisco is a transition from hardware-first to software and subscription-first. The company’s Annual Recurring Revenue (ARR) reached $29.4 billion in FY2024 — up 22% and representing more than 50% of total revenue for the first time. This transition matters enormously for how the business is valued: hardware revenue is lumpy and cyclical; subscription revenue is predictable, recurring, and commands a higher valuation multiple.

Key Takeaways

• Cisco generated $53.8B in FY2024 revenue (-5.6% YoY) — the decline is almost entirely a Networking inventory digestion issue (customers who over-ordered switches and routers during the 2021–2023 supply chain crisis are working through excess stock); underlying software and recurring revenue grew double digits
• Annual Recurring Revenue (ARR) of $29.4B (+22% YoY) has crossed 50% of total revenue — the single most important metric for Cisco’s transformation thesis; as ARR grows and hardware normalises, revenue quality improves and valuation multiples should expand
• The $28B Splunk acquisition (completed March 2024) added the industry’s leading SIEM (Security Information and Event Management) platform and a major observability business; Splunk created the new Observability segment and materially expanded the Security segment
• Networking (-12.8% in FY2024) is the drag — but this is the expected hangover from supply chain-driven over-ordering; when customers exhaust excess inventory (typically a 2–4 quarter cycle), networking orders normalise; management and analysts broadly expect a Networking recovery beginning FY2025
• Security (+30.8%) is the fastest-growing major segment, combining Splunk SIEM, firewalls, Duo zero-trust, and XDR into an increasingly integrated platform; Cisco is now competing directly with Palo Alto Networks and CrowdStrike for the “security platform consolidation” opportunity
• AI networking is the under-appreciated upside: building hyperscale AI data centres requires massive quantities of high-speed switches and optics (400G/800G Ethernet or InfiniBand); Cisco’s Networking division is a direct beneficiary of AI infrastructure buildout at cloud providers
• Gross margin of 61.0% reflects the ongoing mix shift toward software — hardware-only margins run ~55%, software/services margins run 70%+ — and the trajectory improves as software becomes a larger revenue share
• Dividend yield of ~3.3% and 13 consecutive years of dividend increases make Cisco one of the most reliable capital return stocks in technology; the company also maintains an active buyback programme

Cisco (CSCO) Business Model

Cisco’s business model has undergone a fundamental evolution over the past decade — from selling hardware with attached support contracts to selling integrated hardware-software platforms under multi-year subscription agreements. Understanding this evolution is essential to interpreting Cisco’s financial results.

The Historical Model: Box-Shipping with Maintenance Contracts

For most of Cisco’s history, the business model was straightforward:

1. A customer needed to upgrade their network — buy new switches, routers, or wireless access points
2. Cisco won the deal through its dominant market position (~50% enterprise switching share), channel partner relationships, and technical superiority
3. The customer paid for hardware upfront
4. The customer then purchased a SmartNet support contract (typically 1–3 years) for software updates, hardware replacement, and technical support
5. When the hardware reached end-of-life (typically 5–7 years), the customer replaced it and the cycle began again

This model generated Cisco’s enormous scale and profitability, but had two structural weaknesses: revenue was lumpy and tied to hardware refresh cycles (unpredictable timing), and valuation was constrained by a P/E multiple appropriate for hardware-adjacent businesses rather than software.

The Transition: Subscription, Platform, and ARR

Cisco’s strategic transformation, accelerated under CEO Chuck Robbins since 2015, involves three interconnected shifts:

1. Software subscriptions: Rather than selling hardware with attached support, Cisco now sells hardware and software bundled into subscription agreements — customers pay annually or multi-year for the right to use Cisco’s networking, security, and collaboration platforms. The Cisco DNA Center (now Cisco Catalyst Center) network management platform, for example, is sold as an annual subscription rather than a one-time software license. This converts lumpy hardware-cycle revenue into predictable annual subscription revenue.

2. Platform integration: Cisco is assembling product portfolios in networking, security, observability, and collaboration that are designed to integrate deeply with each other. The theory: if a customer uses Cisco for networking, they are more likely to standardise on Cisco for security (because the integration reduces complexity); if they use Cisco for security, they are a natural target for Cisco’s observability tools. This “platform land-and-expand” strategy is the same playbook that Palo Alto Networks has executed in security.

3. Splunk: the missing data layer: The $28B Splunk acquisition addressed a critical gap in Cisco’s portfolio. Cisco had networking visibility (what traffic is flowing) and security detection (what threats exist) but lacked the large-scale data ingestion and analytics platform that makes security and observability actionable at enterprise scale. Splunk’s SIEM and data platform fills this gap — and allows Cisco to compete for the “data-driven security operations” budget that CrowdStrike and Palo Alto Networks were capturing with more modern platforms.

The ARR Metric: Why It Matters More Than Revenue

Annual Recurring Revenue (ARR) — Cisco’s reported $29.4B in FY2024 — represents the annualised value of all active subscription and support contracts. It is the single most important metric for understanding Cisco’s business quality because:

• ARR grows independently of hardware cycle timing — even when hardware revenue falls during inventory digestion quarters, ARR can continue growing as subscription attach rates improve
• ARR has higher gross margins than hardware revenue (~75%+ vs. ~55%)
• ARR provides revenue visibility — contracted recurring revenue is far more predictable than project-based hardware orders
• ARR growth of 22% YoY demonstrates that the underlying subscription business is in excellent health even while total reported revenue declined 5.6%

The investment thesis for Cisco bulls is that as ARR continues growing toward 60–70% of revenue, the total reported revenue number becomes less relevant as a valuation anchor, and the stock should be valued on ARR multiples more consistent with SaaS businesses.

How Cisco Generates Revenue Across Its Portfolio

Enterprise Customers remain the core. Fortune 500 companies, large government agencies, healthcare systems, universities, and financial institutions rely on Cisco infrastructure across all segments — networking, security, collaboration, and observability. Enterprise contracts are typically multi-year and involve complex IT purchasing processes with channel partners (Cisco’s VAR network — value-added resellers — is one of the largest in technology, with thousands of certified partners globally).

Service Provider Customers (telcos, cable companies, ISPs) use Cisco’s routing and optical networking products for backbone infrastructure. Service provider revenue is more cyclical than enterprise and has been a weaker component in recent years.

Cloud/Hyperscaler Customers are an emerging and growing segment. Cloud providers building AI data centres need Cisco’s high-speed networking (400G/800G switches, silicon photonics-based optics). Cisco’s Silicon One ASIC (application-specific integrated circuit) for data centre networking is positioned specifically for hyperscale AI infrastructure — competing with Arista Networks and custom ASIC solutions from Broadcom.

Cisco Competitors

Cisco competes across multiple technology markets, with different competitors in each:

Arista Networks — the most direct and dangerous Networking competitor

Arista is the primary challenger to Cisco’s data centre and cloud networking dominance. Arista’s cloud-native operating system (EOS) runs on a range of switches from multiple hardware vendors, appealing to hyperscalers who want software flexibility on commodity hardware. Arista has taken significant share from Cisco in cloud data centre switching — AWS, Meta, and Microsoft are all major Arista customers. Arista is also aggressively pursuing the enterprise campus market (Cisco’s traditional stronghold) with its AI networking platform. Arista is not currently on Visuwire but is the most important networking competitor to benchmark against.

Palo Alto Networks — Security platform competitor

Palo Alto Networks is the most important security competitor as Cisco builds out its integrated security platform. Palo Alto’s “platformisation” strategy — selling a unified security platform (NGFW, cloud security, SOC automation) vs. best-of-breed point solutions — is exactly what Cisco is attempting with its security portfolio plus Splunk. The two companies are in a direct competitive battle for enterprise “security platform consolidation” budget. Palo Alto has a head start in cloud-native security; Cisco has the advantage of its massive networking installed base as a distribution channel for security products. Whoever wins more of the platform consolidation deals in the next 2–3 years will likely define the security vendor landscape for a decade.

CrowdStrike — Endpoint and AI-driven security

CrowdStrike’s Falcon platform dominates endpoint detection and response (EDR) and extended detection and response (XDR) — products that Cisco also offers. CrowdStrike’s AI-native approach and its reputation following the rapid growth post-NotPetya/SolarWinds era give it credibility in security operations that Cisco’s Talos threat intelligence and XDR products are trying to match. Cisco’s Splunk SIEM acquisition was partly motivated by building a competitor to the integrated XDR+SIEM capability that CrowdStrike is assembling.

Cloudflare — Edge networking and SSE (Security Service Edge)

Cloudflare competes with Cisco in the fast-growing Secure Access Service Edge (SASE) and Security Service Edge (SSE) market — cloud-delivered networking security services for the remote workforce. Cisco’s own SASE offering (Cisco+ Secure Connect, built on Meraki and Umbrella) competes with Cloudflare’s Zero Trust and SASE products. Cloudflare’s developer ecosystem and global edge network give it unique advantages in the modern, cloud-first enterprise.

Microsoft Teams / Zoom — Collaboration

Cisco’s Webex collaboration platform competes directly with Microsoft Teams (deeply integrated into Microsoft 365) and Zoom. Microsoft Teams has taken significant enterprise collaboration share by leveraging its Office 365 distribution advantages — Teams is essentially included in most enterprise Microsoft licensing. This competitive pressure has constrained Collaboration segment growth to low single digits.

Juniper Networks — Service Provider routing

Juniper (now being acquired by HPE) competes with Cisco in service provider routing and enterprise networking. Juniper’s AI-driven networking platform (Mist AI, acquired in 2019) competes with Cisco’s Meraki wireless and Catalyst Center management platform for AI-driven enterprise networking. The HPE-Juniper combination creates a larger combined competitor.

Revenue Breakdown

Cisco’s fiscal year ends in late July. Financial data sourced from Cisco SEC Filings. Note: Observability growth is inflated by Splunk acquisition (March 2024); organic growth is lower.

Networking — 52% of Revenue ($28.0B, -12.8%)

Cisco’s largest segment: enterprise switches, routers, wireless access points, SD-WAN (Software-Defined WAN), and data centre networking. The -12.8% decline is the primary driver of Cisco’s total revenue contraction and requires context:

The inventory digestion story: During the 2021–2022 global semiconductor supply shortage, enterprises placed orders for Cisco networking equipment 12–18 months in advance, fearing they would not be able to get hardware when they needed it. As supply normalised in 2023, Cisco’s order backlog began shipping — but customers who had received large deliveries no longer needed to place new orders; they were consuming the excess inventory they had accumulated. This dynamic — strong prior-period deliveries creating a current-period order vacuum — is called “inventory digestion” and is the near-universal explanation for Cisco’s Networking decline.

Why this is cyclical, not structural: Cisco’s enterprise networking market share (~50% in switches, ~40% in enterprise routers) has not materially declined. The installed base continues growing. The inventory digestion phenomenon is a timing mismatch — orders will normalise as customers’ on-hand stock depletes. Management and consensus analyst estimates expected Networking order recovery beginning in FY2025.

AI networking as the structural tailwind: Beyond the recovery thesis, AI data centre buildouts require enormous quantities of high-speed networking hardware — 400G and 800G Ethernet switches, silicon photonics optics, and spine/leaf architectures that scale to thousands of GPU nodes. Cisco’s Silicon One ASIC platform and its data centre switching portfolio (Nexus 9000 series, now with 400G/800G variants) are directly positioned for AI infrastructure networking. Every GPU cluster built for AI training requires a high-performance networking fabric; Cisco and Arista are the primary beneficiaries.

Key networking products:

• Cisco Catalyst (formerly Cisco Catalyst 9000): Enterprise campus switches for office buildings, universities, hospitals
• Cisco Nexus: Data centre switches, now with AI-scale variants
• Cisco ISR/ASR/NCS: Routing platforms for enterprise WAN and service provider networks
• Cisco Meraki: Cloud-managed networking (Wi-Fi, switches, security appliances) primarily for distributed enterprise and mid-market; subscription model
• Cisco Silicon One: Custom networking ASIC for hyperscale data centre and AI infrastructure applications

Services — 26% of Revenue ($14.2B, +2.9%)

Technical support, professional services, and managed services. Services is Cisco’s most stable and highest-margin revenue stream:

Technical Support (SmartNet and CX Cloud): Annual maintenance and support contracts for Cisco hardware and software — the right to software updates, hardware replacement under warranty, and 24/7 technical support. SmartNet is one of the most profitable product lines in enterprise technology. CX Cloud is the next-generation digital support platform.

Professional Services: Cisco’s consulting and implementation services — helping customers design networks, migrate to new platforms, and integrate Cisco products. Less recurring than support but increasingly important as IT infrastructure complexity grows.

Services revenue growing at 2.9% despite total company revenue declining confirms that the installed base is healthy and customers are renewing maintenance contracts — a validation that the networking decline is a purchasing cycle issue, not a customer loss issue.

Security — 9% of Revenue ($5.1B, +30.8%)

Security is Cisco’s highest-growth major segment, driven by the $28B Splunk acquisition and organic growth in its existing security portfolio. Post-Splunk, Cisco’s security portfolio spans:

Network Security: Cisco Firepower NGFW (Next-Generation Firewall) and ASA firewalls — still among the largest enterprise firewall installed bases globally. Competing with Palo Alto Networks’ NGFW for enterprise firewall refresh cycles.

Zero Trust / Identity: Duo Security (acquired 2018) — multi-factor authentication (MFA) and zero-trust access. Duo has grown into a significant product line with millions of enterprise users. Cisco positions Duo as the identity layer of its security platform.

XDR (Extended Detection and Response): Cisco XDR integrates threat detection across network, endpoint, cloud, and email — competing with CrowdStrike Falcon and Palo Alto’s Cortex XDR.

Splunk SIEM: The SIEM market is the largest addressable market in enterprise security software. Splunk’s platform ingests enormous quantities of log data from every device on an enterprise network and applies analytics to detect threats, investigate incidents, and generate compliance reports. Post-acquisition, Splunk SIEM is Cisco’s entry into the data-driven security operations market.

Email Security: Cisco Secure Email (formerly IronPort) defends against phishing, malware, and spam — a large installed base in enterprise.

Umbrella (DNS Security) and Talos: Cisco Umbrella provides cloud-delivered DNS security for remote users; Talos is Cisco’s threat intelligence organisation (one of the largest commercial threat intelligence teams globally), providing the threat data that powers Cisco’s security products.

The 30.8% security growth includes Splunk contribution (partial year, acquisition closed March 2024). Organic security growth — excluding Splunk — was also strong in the high teens, reflecting broad enterprise demand for integrated security solutions.

Collaboration — 8% of Revenue ($4.2B, +2.4%)

Webex Suite: Cisco’s video conferencing, messaging, calling, and contact centre platform. Webex competes directly with Microsoft Teams (the market leader by enterprise seats) and Zoom. Teams’ deep integration with Microsoft 365 — free/low-incremental-cost for existing Microsoft customers — has structurally constrained Webex’s growth in the core meetings and messaging market.

Cisco has pivoted Webex toward AI-powered features (real-time transcription, meeting summaries, action items, AI-generated coaching for sales calls) and the contact centre market (Webex Contact Center), where it competes with Genesys, NICE, and Five9 for large enterprise deals. Contact centre AI is a genuine growth area where Cisco has competitive assets.

The 2.4% growth rate reflects the competitive pressure from Microsoft Teams — Cisco is not losing customers at scale, but growth is muted compared to networking and security opportunity.

Observability — 3% of Revenue ($1.6B, +220%)

The newest segment, created to house Splunk’s observability capabilities plus Cisco’s existing AppDynamics (application performance monitoring) and ThousandEyes (internet/cloud path monitoring).

Splunk Observability Cloud: Monitoring and troubleshooting for cloud-native applications — APM (application performance monitoring), infrastructure monitoring, log management, and synthetic monitoring.

AppDynamics: Traditional APM for enterprise applications — monitoring response times, identifying bottlenecks, and tracing transactions through complex application stacks.

ThousandEyes: Network intelligence platform monitoring the performance of internet paths, cloud services (AWS, Azure, Google Cloud), and SaaS applications from the user’s perspective.

The 220% growth rate is almost entirely acquisition-driven (Splunk had ~$3.7B in annual revenue; the partial-year contribution inflated Observability’s YoY comparison). Organic observability growth is strong but more moderate.

Revenue Trend (3-Year)

The three-year revenue pattern shows FY2023 as the peak (supply chain backlog delivery creating an elevated revenue year) and FY2024 as the post-inventory digestion trough. Gross margin has been remarkably stable (61–62%), confirming the business quality thesis — even during a revenue down year, margins held. Net income in FY2024 ($10.3B) reflects Splunk acquisition costs and integration expenses; normalised non-GAAP net income is materially higher.

Cisco (CSCO) Income Statement

Financial data sourced from Cisco SEC Filings.

Cisco (CSCO) Key Financial Metrics

• Gross Margin: 61.0% — High and structurally improving. Cisco’s gross margin reflects the growing software and subscription mix (which carries 70–80%+ gross margins) partially offset by lower-margin hardware (55%). As ARR grows toward 60–70% of revenue, blended gross margin should expand toward 63–65%+ over the medium term. The stability of gross margins (61.0% vs. 61.2% prior year) despite a hardware-heavy revenue decline confirms that higher-margin software revenue grew faster than lower-margin hardware declined

• Operating Margin: 23.4% — Compressed by Splunk integration costs, restructuring charges, and higher operating expenses from the combined company. Cisco’s underlying non-GAAP operating margin (which strips out acquisition-related charges, amortisation of acquired intangibles, and stock-based compensation) is significantly higher — typically in the 33–35% range. The GAAP operating margin of 23.4% should recover as integration costs normalise and Splunk’s profitability improves through cost synergies

• Annual Recurring Revenue (ARR): $29.4B (+22%) — The transformation metric. ARR surpassing 50% of total revenue in FY2024 is a significant milestone. Product ARR (software subscriptions for networking, security, and collaboration platforms) is the fastest-growing component, reflecting the success of Cisco’s transition from perpetual licenses to subscriptions. Target ARR trajectory implies $35–40B ARR by FY2026–27, which would represent 60%+ of projected revenue

• Free Cash Flow: ~$16.5B — Strong and one of Cisco’s most important investor attributes. High recurring revenue, capital-light business model (Cisco outsources hardware manufacturing), and disciplined working capital management generate exceptional cash conversion. Free cash flow funds the dividend, share buybacks, and M&A

• Dividend and Capital Return: Cisco has paid and grown its dividend for 13 consecutive years, yielding approximately 3.3%. The company also maintains a substantial buyback programme — historically $5–10B per year in buybacks. Total capital return (dividends + buybacks) typically approaches or exceeds free cash flow, making Cisco one of the most shareholder-friendly large-cap technology companies

• Stock-Based Compensation: Cisco’s SBC is meaningful (~$1.5B+ annually) but modest relative to its size and peers — another characteristic of a mature, FCF-generative business rather than a high-growth startup. The SBC ratio is much lower than comparable security vendors like Palo Alto Networks or CrowdStrike

• Debt: Cisco took on additional debt to fund the $28B Splunk acquisition, adding ~$16–17B in gross debt. This is well within Cisco’s coverage capacity given $16.5B+ in annual free cash flow, but leverage has increased from historically conservative levels. Expect aggressive debt paydown over FY2025–2027

The Splunk Acquisition: What Cisco Bought and Why

The $28 billion Splunk acquisition deserves dedicated analysis because it represents a strategic bet that will shape Cisco’s next decade:

What Splunk does: Splunk is the market-leading platform for searching, monitoring, and analysing machine-generated data — log files, security events, application metrics, and IT operational data from every device and system in an enterprise. Splunk’s core product (Splunk Enterprise / Splunk Cloud) ingests terabytes of log data daily, allows security and IT teams to run queries across all of it, and powers dashboards, alerts, and reports.

Why Cisco wanted Splunk: Three strategic rationales:

1. SIEM and security operations: Splunk SIEM (Security Information and Event Management) is the backbone of security operations centres (SOCs) at thousands of enterprises. Combining Splunk SIEM with Cisco’s Talos threat intelligence, XDR, and firewall data creates a vertically integrated security operations platform that can compete with next-generation SIEM offerings from Microsoft (Sentinel), CrowdStrike (Falcon LogScale), and Palo Alto Networks (Cortex XSIAM)

2. Observability and AIOps: Splunk’s observability platform gives Cisco a product competing in the fast-growing IT operations and AIOps markets — monitoring application performance, infrastructure health, and business service availability at the data level, not just the network level

3. Data as a competitive moat: Splunk processes more enterprise security and IT data than almost any other platform. The company that holds the data has a structural advantage in applying AI to detect threats, predict failures, and automate operations — a strategic positioning bet that data volume + AI = durable competitive advantage

Integration challenges: Splunk’s cloud migration was incomplete at acquisition — a large portion of revenue was still from legacy on-premise Splunk Enterprise licenses. Converting Splunk customers to Splunk Cloud (SaaS) subscription model, integrating Splunk data into Cisco’s security and networking products, and realising the promised cost synergies are the primary integration execution risks.

Is Cisco Profitable?

Yes. Cisco reported net income of $10.3 billion on $53.8 billion in revenue in FY2024 — a 19.1% net margin — with a 61.0% gross margin. Cisco is one of the most consistently profitable large-cap technology companies, having generated $10B+ in net income in multiple consecutive years.

FY2024 net income ($10.3B) is below FY2023 ($12.6B), reflecting: Splunk acquisition and integration costs (~$2.7B in restructuring and acquisition charges), higher operating expenses from the combined company, and interest expense on acquisition debt. The non-GAAP (adjusted) earnings picture is materially better — non-GAAP operating income in FY2024 was approximately $18B+, reflecting a non-GAAP operating margin in the mid-30s.

Cisco generates approximately $16–17B in annual free cash flow — exceptional for a company of its size and a key reason it has returned hundreds of billions to shareholders through dividends and buybacks over its history.

Cisco (CSCO): What to Watch

1. Networking order recovery — The most important near-term financial catalyst. As customers deplete excess switch and router inventory accumulated during the supply chain crisis, new orders will normalise. Watch quarterly Networking segment revenue growth (and management guidance) for the recovery inflection. A return to flat or positive Networking growth would likely be the largest single-quarter catalyst for the stock. Management expected this recovery to begin in FY2025

2. Splunk ARR growth and cloud migration — Splunk’s transition from on-premise licenses to Splunk Cloud subscriptions is the key metric for the Observability segment and for Cisco’s overall ARR trajectory. Watch Splunk-specific ARR figures (typically disclosed separately) and cloud mix percentages — accelerating cloud adoption means better revenue quality and higher customer lifetime value

3. Security platform consolidation wins — Palo Alto Networks is executing a “platformisation” strategy that bundles firewall, cloud security, and SOC tools at discounted pricing to pull customers off multiple security vendors. Cisco is responding with its own platform story (Splunk + Firepower + Duo + XDR). The competitive outcome of the enterprise security platform consolidation wars over 2025–2027 will determine whether Cisco’s Security segment grows at 15%+ or compresses under competitive pricing pressure. Watch deal win/loss announcements and security ARR growth

4. AI networking revenue — Beyond the inventory digestion recovery story, the AI data centre buildout is a structural opportunity for Cisco’s high-speed networking products. Watch for specific disclosure on AI networking revenue (400G/800G switches, Silicon One, data centre optics) as evidence that Cisco is capturing its share of the AI infrastructure capex cycle. Arista Networks’ results are the best proxy for AI networking demand

5. ARR as a percentage of total revenue — The transition from <50% to 60–70% recurring revenue would warrant a significant valuation re-rating. Track ARR growth trajectory each quarter and what percentage of total revenue it represents. When ARR reaches 65%+, Cisco should begin trading on ARR and software growth multiples rather than traditional hardware P/E multiples

6. Cost synergies from Splunk — Cisco committed to achieving meaningful cost synergies from the Splunk acquisition. Track operating expenses as a percentage of revenue: if Splunk integration drives SG&A and R&D efficiency while maintaining revenue growth, operating margins should recover toward pre-acquisition levels. Any upward revision to synergy targets would be positive; underperformance on integration would be negative

7. Competitive response to Microsoft in Collaboration — Microsoft Teams continues to grow at Webex’s expense through Office 365 bundling. Cisco’s strategy — AI-powered differentiation in Webex, contact centre AI focus, and enterprise calling — needs to demonstrate sustained relevance. Watch Collaboration ARR (not just revenue) for signals on customer retention and expansion

Cisco (CSCO) Financial Summary

Cisco Systems (CSCO) is the world’s largest enterprise networking company, generating $53.8 billion in total revenue in fiscal year 2024 (-5.6% YoY) with $10.3 billion in net income and a 61.0% gross margin. The revenue decline is a transient inventory digestion phenomenon in Networking, not structural deterioration — underlying Annual Recurring Revenue grew 22% to $29.4B, crossing 50% of total revenue for the first time.

The business is in the middle of two simultaneous strategic transitions: (1) transforming from hardware-first to subscription-first, with ARR growing toward 60–70% of revenue; and (2) integrating the $28B Splunk acquisition to build a competitive security analytics and observability platform. Execution on both — Networking recovery, Splunk integration, security platform wins against Palo Alto Networks and CrowdStrike, and ARR trajectory — will determine whether Cisco’s valuation multiple expands toward software peers or remains constrained by its hardware heritage. For broader context, see How Palo Alto Networks Makes its Money, How CrowdStrike Makes its Money, and How Cloudflare Makes its Money.