NETWORKS ASSOCIATES INC/ - 10-Q Quarterly Report

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes o No þ

Indicate by check mark whether the registrant is an accelerated filer (as defined in Rule 12b-2 of the Exchange Act). Yes þ No o

As of November 13, 2003, 161,438,984 shares of the registrant’s common stock, $0.01 par value, were outstanding.

The accompanying notes are an integral part of these condensed consolidated financial statements.


(1)	Includes stock-based compensation charges of $2,202 and $1,351 for the three months ended September 30, 2003 and 2002, respectively, and $3,520 and $236 for the nine months ended September 30, 2003 and 2002, respectively.

(2)	Includes stock-based compensation charges (credits) of $2,795 and $903 for the three months ended September 30, 2003 and 2002, respectively, and $3,209 and ($234) for the nine months ended September 30, 2003 and 2002, respectively.

(3)	Includes stock-based compensation charges of $839 and $9,456 for the three months ended September 30, 2003 and 2002, respectively, and $2,033 and $7,195 for the nine months ended September 30, 2003 and 2002, respectively.

The accompanying notes are an integral part of these condensed consolidated financial statements.

Network Associates, Inc. and its wholly owned subsidiaries (the “Company”) are a leading supplier of computer security solutions designed to prevent intrusions on networks and protect computer systems from the next generation of blended attacks and threats. The Company offers two families of products, McAfee System Protection Solutions and McAfee Network Protection Solutions. The Company’s computer security solutions are offered primarily to large enterprises, governments and educational institutions, small and medium-sized businesses and consumer users. The Company operates its business in five geographic regions: North America; Europe, Middle East and Africa (“EMEA”); Japan; Asia-Pacific and Latin America.

On March 26, 2003, the Company announced that, as a result of information obtained in connection with ongoing Securities and Exchange Commission (“SEC”) and Department of Justice investigations into its previously issued consolidated financial statements, it would restate its 2000, 1999 and 1998 financial results to reflect sales to distributors and resellers on a sell-through basis, which is how the Company has recognized revenue from sale to distributors and resellers since the beginning of 2001. In the course of preparing the 2000, 1999 and 1998 consolidated financial statements to properly reflect sales to distributors and resellers on the sell-through basis, the Company identified other items and errors for which accounting adjustments were necessary. As a result of the restatement, the Company delayed the filing of its 2002 Annual Report on Form 10-K and the Quarterly Reports on Form 10-Q for the quarters ending March 31, 2003 and June 30, 2003, all of which were filed with the SEC on October 31, 2003.

In December 2002, the Company filed an amendment to its Quarterly Report on Form 10-Q for the quarter ended September 30, 2002 in connection with an earlier restatement of its financial results. This previously filed financial information for this quarter is referenced herein “as reported.” All restated information for this quarter of 2002 in this Form 10-Q is referenced herein “as restated.”

Set forth below is selected Company consolidated financial data for the three and nine months ended September 30, 2002 on a restated and previously reported basis and a description of the significant adjustments impacting the financial results for the period. The restatement relates primarily to the Company’s change to the sell-through method to properly reflect the recognition of revenue on these sales for years prior to 2001 and the deferral of revenue in connection with certain multi-element licensing arrangements in 1998 through 2000. These adjustments also include additional revenue amounts recognized as a result of the proper application of the revenue recognition principles under Statement of Position (“SOP”) 97-2, “Software Revenue Recognition” (“SOP 97-2”), to correct errors in the application of these principles during 1998 through 2000. In the three months ended September 30, 2002 the effect of the restatement adjustments is to increase net revenues by $22.2 million and reduce expenses by $2.8 million, including income taxes, over amounts previously reported in the three months ended September 30, 2002. In the nine months ended September 30, 2002, the effect of the restatement adjustments is to increase net revenues by $87.7 million and reduce expenses by $5.8 million, including income taxes, over amounts previously reported for the nine months ended September 30, 2002. The restatement adjustment on the consolidated balance sheet relate primarily to purchase accounting adjustments. A more detailed description of the adjustments and reconciliation is set forth in Note 3 to the consolidated financial statements included in the Company’s 2002 Form 10-K filed with the SEC.

The following table sets forth selected consolidated financial data for the Company, showing previously reported and restated amounts, as of September 30, 2002:

The Company sells certain of its products through distributors and other resellers. Since January 1, 2001, the Company has reported revenue from sales to distributors and resellers on a sell-through basis. Adjustments required under the change to a sell-through revenue recognition policy to correctly report revenue from these sales to distributors and resellers had the effect of deferring revenue from 1998 through 2000 and increasing revenues in later periods, including a $5.6 million and $22.0 million related increase in net revenue in the three and nine months ended September 30, 2002.

The accounting treatment with respect to certain revenue arrangements during 1998 through 2000 with multiple obligations has been adjusted to correct certain errors. The Company’s software license arrangements typically include the licensing of software and maintenance and support services or post contract support (“PCS”). SOP 97-2, as amended by SOP 98-9, provides that for arrangements with multiple obligations, such as the sale of software licenses with undelivered PCS, revenue is allocated to each element of the arrangement based on the vendor’s specific objective evidence of fair value of the undelivered elements. Where evidence of fair value of the undelivered elements is determinable and the fair value of the delivered element (e.g. the license) is not determinable, the Company defers revenue from the arrangement equivalent to the fair value of the undelivered elements (e.g. PCS) and recognizes revenue on the delivered element under the residual value method. If the evidence of fair value of undelivered PCS is not determinable, then the entire arrangement fee is recognized ratably over the period that PCS is provided or until evidence of fair value is established. When evidence of fair value is established at a later date, the fair value of the undelivered elements is deferred and the residual portion of the fee is recognized as license revenue.

For one-year and two-year term enterprise software licenses in 1998 through 2000, amounts were allocated based on the list price of the license and the PCS element. In other instances in 1998 through 2000, the Company allocated revenue to the PCS element based on the amount invoiced to the customer. Further, when customers were offered a discount on the list price of bundled licenses and PCS in 1998 through 2000, the discount was allocated proportionately based on list price for the license and PCS. The Company has determined that these discounts should have been allocated entirely to the delivered license elements. In addition, the Company has reevaluated whether its methods for allocating revenues to the PCS element was supported by sufficient evidence of the fair value of the PCS based on prices for which PCS was sold separately in 1998 through 2000. For some products, the Company determined that sufficient evidence of fair value did not exist. For other products, evidence of fair value existed, but the amount of deferred revenue should have been greater.

Upon review of maintenance and support agreements included with the sale of retail licenses in 1998 through 2000, the Company determined it had inappropriately established the fair value for the PCS element (updates to virus definition files) of these arrangements. As the Company did not sell the PCS separately until late 2000, all license and PCS revenue under the arrangement should have been deferred and recognized over the three-year estimated life of the retail license or until evidence of fair value of the PCS was established. As a result, the Company recorded adjustments related to its retail licenses in 1998 through 2000 to recognize all related license and PCS revenue ratably over the three-year estimated life of the license until the evidence of fair value of PCS was established in the fourth quarter of 2000. At that time, evidence of fair value for PCS was established based on an annual renewal rate for the PCS element included with its retail licenses.

Overall adjustments to multi-element revenue arrangements resulted in the same amount of revenue recognized in total cumulatively over all periods affected, except for the effect of foreign currency adjustments. However, as there was a significant increase in deferred revenue in 1998 through 2000, service and support

revenue will be increased in subsequent periods. Multi-element revenue deferrals from 1998 through 2000 resulted in $15.6 million and $60.0 million additional revenue during the three and nine months ended September 30, 2002.

The Company’s cost of net product revenue consists primarily of the following: cost of media, manuals and packaging for products distributed through traditional channels; royalties; and, with respect to hardware-based products, computer platforms and other hardware components. The cost of net product revenue has been adjusted to reflect the Company’s conversion to a sell-through revenue recognition as discussed in “Restatement to Sell-through Revenue Recognition” above.

The Company determined that stock-based compensation charges of $1.4 million originally recorded in the first quarter of 2002, when the transactions were discovered, should have been recorded in 2000, when the transactions occurred, and stock-based compensation has been decreased by that amount in 2002.

Additional information regarding the Company’s restatement adjustments in 1998 through 2001 and subsequent periods is located in the Company’s (i) consolidated financial statements for each of the years in the three year period ended December 31, 2000, as filed in Amendment No. 2 to the Company’s 2000 Form 10-K, and (ii) consolidated financial statements for each of the years in the three-year period ended December 31, 2002, as filed in the Company’s 2002 Form 10-K.

The accompanying condensed consolidated financial statements include the accounts of the Company and its wholly owned subsidiaries as of September 30, 2003 and for the three and nine months ended September 30, 2003 and 2002. All significant intercompany accounts and transactions have been eliminated in consolidation. These condensed consolidated financial statements have been prepared by the Company, without audit, pursuant to the rules and regulations of the Securities and Exchange Commission. Certain information and footnote disclosures normally included in financial statements prepared in accordance with accounting principles generally accepted in the United States of America have been condensed or omitted pursuant to such rules and regulations. The December 31, 2002 Consolidated Balance Sheet was derived from audited consolidated financial statements, but does not include all disclosures required by accounting principles generally accepted in the United States of America. However, the Company believes that all disclosures are adequate to make the information presented not misleading. The accompanying unaudited, condensed consolidated financial statements should be read in conjunction with the audited consolidated financial statements and the notes thereto, included in the Company’s Annual Report on Form 10-K for the year ended December 31, 2002.

In the opinion of management, all adjustments (which include normal recurring adjustments, except as disclosed herein) necessary to present a fair statement of financial position as of September 30, 2003, results of operations and cash flows for the three and nine months ended September 30, 2003 and 2002 have been included. The results of operations for the three and nine months ended September 30, 2003 are not necessarily indicative of the results to be expected for the full fiscal year or for any future periods.

Certain amounts from 2002 have been reclassified to conform to the 2003 presentation.

As permitted by Statement of Financial Accounting Standard (“SFAS”) No. 123, “Accounting for Stock-Based Compensation,” (“SFAS 123”) and as amended by SFAS No. 148, “Accounting for Stock-Based Compensation — Transition and Disclosure” (“SFAS 148”), the Company accounts for employee stock-based compensation in accordance with Accounting Principles Board Opinion No. 25 (“APB 25”), “Accounting for Stock Issued to Employees,” and FASB Interpretation No. 44, “Accounting for Certain Transactions Involving Stock-Based Compensation, an interpretation of APB Opinion No. 25” (“FIN 44”) and the related interpretations in accounting for its stock-based compensation plans. Stock-based compensation related to non-employees is based on the fair value of the related stock or options in accordance with SFAS 123 and its interpretations. Expense associated with stock-based compensation is amortized over the vesting period of each individual award.

The Company utilized the following assumptions in calculating the estimated fair value of each stock option on the date of grant using the Black-Scholes option-pricing model with the following weighted-average assumptions for grants:

The following table illustrates the effect on net income and earnings per share if the Company had applied the fair value recognition provision of SFAS 123 to all of its stock-based compensation plans.

Effective January 1, 2003, the Company changed its method for recognizing commission expenses to sales personnel. Prior to January 1, 2003, the Company’s policy has been to expense the commissions as incurred, however, the Company believes that expensing the commissions as incurred does not provide a fair

representation of the income (loss) from operations where part or all of the revenue related to these sales transactions is deferred and recognized over time. Commission expense directly related to sales transactions is now deferred and recognized ratably over the same period as the related revenue is recognized and recorded, which the Company believes will provide greater transparency into its performance.

As required by accounting principles generally accepted in the United States of America, the cumulative effect of the change in accounting principle effective January 1, 2003 resulted in a one-time credit of $13.9 million ($11.1 million after tax). The following table illustrates the three and nine months ended September 30, 2002 after considering the commission accounting change and presents the 2002 results for comparison to the current periods:

In June 2001, the Financial Accounting Standards Board (“FASB”) issued SFAS No. 143 “Accounting for Asset Retirement Obligations” (“SFAS 143”). SFAS 143 addresses the financial accounting and reporting for obligations associated with the retirement of tangible long-lived assets and the associated asset retirement

costs. SFAS 143 applies to legal obligations associated with the retirement of long-lived assets that result from the acquisition, construction, development and/or normal use of the assets, including lease restoration obligations. SFAS 143 requires that the fair value of a liability for an asset retirement obligation be recognized in the period in which it is incurred if a reasonable estimate of the fair value can be made. The fair value of the liability is added to the carrying amount of the associated asset, and this additional carrying amount is expensed over the life of the asset. The Company adopted SFAS 143 effective January 1, 2003. The adoption of SFAS 143 did not have a material impact on the Company’s consolidated financial condition, results of operations or cash flows.

In May 2002, the FASB issued SFAS No. 145, “Rescission of SFAS Nos. 4, 44, and 64, Amendment of SFAS No. 13, and Technical Corrections” (“SFAS 145”). Among other things, SFAS 145 rescinds various pronouncements regarding early extinguishment of debt and allows extraordinary accounting treatment for early extinguishment only when the provisions of Accounting Principles Board Opinion No. 30, “Reporting the Results of Operations — Reporting the Effects of Disposal of a Segment of a Business, and Extraordinary, Unusual and Infrequently Occurring Events and Transactions” are met. SFAS 145 provisions regarding early extinguishment of debt are generally effective for fiscal years beginning after May 15, 2002. As a result of adopting this Standard, the Company reclassified the loss on retirement of its convertible debt as other expense and conformed prior periods with this presentation.

In July 2002, the FASB issued SFAS No. 146 “Accounting for Costs Associated with Exit or Disposal Activities” (“SFAS 146”). SFAS 146 addresses the recognition, measurement and reporting of costs associated with exit and disposal activities (i.e., restructuring activities), including costs related to terminating a contract that is not a capital lease and termination benefits due to employees who are involuntarily terminated under the terms of a one-time benefit arrangement.

SFAS 146 supersedes the Emerging Issues Task Force (“EITF”) Issue No. 94-3 “Liability Recognition for Certain Employee Termination Benefits and Other Costs to Exit an Activity (Including Certain Costs Incurred in a Restructuring)” (“EITF 94-3”) and EITF Issue No. 88-10 “Costs Associated with Lease Modification or Termination” (“EITF 88-10”). SFAS 146 prohibits recognition of a liability based solely on an entity’s commitment to a plan to exit an activity. SFAS 146 requires that: (i) liabilities associated with exit and disposal activities be measured at fair value and changes in the fair value of the liability at each reporting period be measured using an interest allocation approach; (ii) one-time termination benefits be expensed at the date the entity notifies the employee, unless the employee must provide future service, in which case the benefits are expensed ratably over the future service period; (iii) liabilities to terminate a contract be recorded at fair value when the contract is terminated; (iv) liabilities related to an existing operating lease/contract, unless terminated, be recorded at fair value, less estimated sublease income, and measured when the contract does not have any future economic benefit to the entity (i.e., the entity ceases to utilize the rights conveyed by the contract); and (v) all other costs related to an exit or disposal activity be expensed as incurred.

SFAS 146 is effective for exit or disposal activities initiated after December 31, 2002. The Company adopted SFAS 146 during the fourth quarter of 2002. Restructuring charges recorded by the Company in the three and nine month periods ended September 30, 2003 have been recognized in accordance with SFAS 146. The adoption of SFAS 146 will not impact the Company’s restructuring obligations recognized in 2002 as these obligations must continue to be accounted for in accordance with EITF 94-3 and other applicable pre-existing guidance.

In December 2002, the FASB issued SFAS No. 148, “Accounting for Stock-Based Compensation, Transition and Disclosure” (“SFAS 148”). SFAS 148 provides alternative methods of transition for a voluntary change to the fair value based method of accounting for stock-based employee compensation. SFAS 148 also requires that disclosures of the pro forma effect of using the fair value method of accounting for stock-based employee compensation be displayed more prominently and in a tabular format. Additionally, SFAS 148 requires disclosure of the pro forma effect in interim financial statements. The transition and annual disclosure requirements of SFAS 148 are effective for fiscal years ended after December 15, 2002. The interim disclosure requirements are effective for interim periods beginning after December 15, 2002. The Company has adopted the interim disclosure provisions of SFAS 148 in its financial reports for the three and nine months ended September 30, 2003. As the adoption of this standard involves disclosures only, there was no material impact on the Company’s consolidated financial position, results of operations or cash flows.

In April 2003, the FASB issued SFAS No. 149, “Amendment of Statement 133 on Derivative Instruments and Hedging Activities” (“SFAS 149”). SFAS 149 (i) clarifies under what circumstances a contract with an initial net investment meets the characteristics of a derivative discussed in SFAS 133; (ii) clarifies when a derivative contains a financing component; and (iii) amends the definition of an underlying to conform it to language in FIN 45. SFAS 149 is generally effective for contracts entered into or modified after June 30, 2003. The Company has adopted the provisions of SFAS 149 which did not have a material impact on the Company’s consolidated financial position, results of operations or cash flows.

In May 2003, the FASB issued SFAS No. 150, “Accounting for Certain Financial Instruments with Characteristics of both Liabilities and Equity”(“SFAS 150”). SFAS 150 establishes standards for how companies classify and measure certain financial instruments with characteristics of both liabilities and equity. It requires companies classify a financial instrument that is within its scope as a liability (or an asset in some circumstances) as defined in SFAS 150. On November 5, 2003, the FASB announced that the classification and measurement provisions in paragraphs 9, 10, and 22 of FAS 150 were being deferred for an indefinite period for certain mandatorily redeemable non-controlling interests (“MRNI”) associated with finite-lived subsidiaries. The instruments covered by this deferral would be redeemable only upon the liquidation or termination of the finite-lived subsidiary and would apply to both existing and future arrangements. For SEC registrants, the disclosure provisions of SFAS 150 are expected to apply without any deferral. Therefore, companies will be expected to disclose the amount that would be paid if the settlement were to occur at the reporting date for the MRNI described above.

The Company has adopted the required provisions of SFAS 150 which did not have a material impact on the Company’s consolidated financial position, results of operations or cash flows based on the types of financial instruments the Company currently has issued. The Company is assessing the impact of the deferred classification and measurement provisions of SFAS 150.

In November 2002, the EITF reached a consensus on Issue No. 00-21, “Multiple Deliverable Revenue Arrangement” (“EIT 00-21”). EITF 00-21 addresses certain aspects of the accounting by a vendor for arrangements under which it will perform multiple revenue-generating activities. It also addresses when and how an arrangement involving multiple deliverables should be divided into separate units of accounting. The guidance in EITF 00-21 is effective for revenue arrangements entered into in fiscal periods beginning after June 15, 2003, with early application permitted. Companies may elect to report the change in accounting as a

cumulative effect of a change in accounting principle in accordance with APB Opinion 20, “Accounting Changes” and SFAS No. 3, “Reporting Accounting Changes in Interim Financial Statements (an amendment of APB Opinion No. 28).” The Company has adopted the provisions of EITF 00-21 for transactions to which SOP 97-2 does not apply, such as sales of hardware without software and hosted applications. The adoption of EITF 00-21 did not have a significant impact on the Company’s consolidated financial position, results of operations or cash flows.

In May 2003, the EITF reached a consensus on Issue No. 03-03, “Accounting for Retroactive Insurance Contracts Purchased by Entities Other Than Insurance Enterprises to Claims-Made Insurance Policies” (“EITF 03-03”). The consensus requires the insured company to determine if their claims-made policy is retroactive, prospective, or both and account for the policy accordingly. A policy has a retroactive provision if it covers a specific known claim(s) that was reportable before the policy’s effective date. The continued applicability of FASB Interpretation No. 39, “Offsetting of Amounts Related to Certain Contracts,” (“FIN 39”) to the recording of liabilities and the related insurance recoverables is also addressed. Since FIN 39 does not allow for offsetting the insurance liability with the recoverable, regardless of whether the company is recording the insurance policy as prospective or retroactive, there will likely be a balance sheet gross-up for all covered losses. EITF 03-03 is applicable to all claims-made insurance arrangements entered into beginning in a company’s next reporting period following ratification which is June 30, 2003 for the Company. The has adopted the provisions of EITF 03-03 which did not have a material impact on its consolidated financial position, results of operations or cash flows.

In November 2002, the FASB issued FASB Interpretation No. 45, “Guarantor’s Accounting and Disclosure Requirements for Guarantees, Including Indirect Guarantees of Indebtedness of Others” (“FIN 45”). FIN 45 requires that a liability (at fair value) be recorded in the guarantor’s balance sheet upon issuance of a guarantee or indemnification. In addition, FIN 45 requires disclosures about the guarantees and indemnifications that an entity has issued, including a reconciliation of changes in the entity’s product warranty liabilities. The initial recognition and initial measurement provisions of FIN 45 are applicable on a prospective basis to guarantees and indemnifications issued or modified after December 31, 2002, irrespective of the guarantor’s fiscal year-end. The Company has adopted FIN 45, which did not have a material impact on its consolidated financial position, results of operations, or cash flows.

In January 2003, the FASB issued FASB Interpretation No. 46, “Consolidation of Variable Interest Entities, an Interpretation of ARB No. 51” (“FIN 46”). FIN 46 requires certain variable interest entities to be consolidated by the primary beneficiary of the entity if the equity investors in the entity do not have the characteristics of a controlling financial interest or do not have sufficient equity at risk for the entity to finance its activities without additional subordinated financial support from other parties. FIN 46 is effective immediately for all new variable interest entities created or acquired after January 31, 2003. The original effective date of FIN 46 was delayed to the first reporting period after December 15, 2003 (December 31, 2003 for the Company) for any variable interest entities or potential variable interest entities created before February 1, 2003. The Company is studying the impact of FIN 46 on its consolidated financial position, results of operations and cash flows.

The Company has recorded stock-based compensation charges of $5.8 million and $11.7 million in the three months ended September 30, 2003 and 2002, respectively, and $8.8 million and $7.2 million in the nine months ended September 30, 2003 and 2002, respectively. Stock-based compensation charges are comprised of the following for the periods presented (in thousands):

Exchange of McAfee.com options. On September 13, 2002, the Company acquired the minority interest in McAfee.com. McAfee.com option holders received options for 0.675 of a share of Networks Associates, Inc. common stock plus $8.00 in cash, which will be paid to the option holder only upon exercise of the option and without interest, in exchange for each McAfee.com option. McAfee.com options to purchase 4.1 million shares were converted into options to purchase 2.8 million shares of the Company’s common stock. The assumed options have been accounted for under the guidance in EITF Issue No. 00-23 “Issues Related to the Accounting for Stock Compensation under APB Opinion No. 25” and FASB Interpretation No. 44, “Accounting for Certain Transactions Involving Stock Compensation — an Interpretation of APB Opinion No. 25.” Accordingly, these options are subject to variable accounting treatment, which means that a compensation charge has been measured initially at the date of the closing of the merger and then remeasured at the end of each reporting period. The initial charge was based on the excess of the closing price of the Company’s stock over the exercise price of the options plus the $11.85 per share payable in cash, which will be paid upon exercise of the option. The charge has been and will be remeasured, using the same methodology, until the earlier of the date of exercise, forfeiture or cancellation without replacement. This compensation charge will be recorded as an expense over the remaining vesting period of the options, using the accelerated method of amortization under FASB Interpretation No. 28 “Accounting for Stock Appreciation Rights and Other Variable Stock Option or Award Plans” (“FIN 28”). To the extent that the options issued were fully vested at the date of the closing of the McAfee.com acquisition, the Company immediately recorded a compensation expense of approximately $10.5 million. Charges related to unvested options will be recorded in deferred stock-based compensation in stockholders’ equity. Depending upon movements in the market value of the Company’s common stock, this accounting treatment may result in significant additional stock-based compensation charges in future periods.

During the three and nine months ended September 30, 2003, the Company recorded a charge of approximately $1.2 million and $2.3 million, respectively, and during the three and nine months ended September 30, 2002, the Company recorded a charge of approximately $11.2 million related to exchanged

options subject to variable accounting. This stock-based compensation charge, related to exchanged options subject to variable accounting, was based on the Company’s closing share price of $13.76 and $10.63 on September 30, 2003 and 2002, respectively. As of September 30, 2003, the Company had approximately 1.0 million outstanding exchanged options subject to variable accounting.

New and existing executives. On January 3, 2001, the Company entered into an employment agreement with George Samenuk to become its president and chief executive officer. In accordance with the terms of the agreement, the Company issued 400,000 shares of restricted stock to Mr. Samenuk. The price of the underlying shares is $0.01 per share. Stock-based compensation associated with Mr. Samenuk’s 2001 restricted stock grant was valued at approximately $2.0 million and was amortized over 24 months beginning January 2001 through December 2002. Approximately $0.2 million and $0.7 million was expensed during the three and nine months ended September 30, 2002, respectively, related to stock-based compensation associated with Mr. Samenuk’s 2001 restricted stock grant.

On January 15, 2002, the Company’s board of directors approved a grant of 50,000 shares of restricted stock to Mr. Samenuk, its chairman and chief executive officer. The price of the underlying shares is $0.01 per share. The shares will vest and the Company’s right to repurchase such shares will lapse as follows: 3,000 vested as of the grant date and 47,000 are restricted until January 15, 2005. The fair value of the restricted stock was determined to be approximately $1.4 million and was estimated based on the difference between the exercise price of the restricted stock and the fair market value of our common stock on January 15, 2002. During the three months ended September 30, 2003 and 2002, the Company recorded approximately $0.1 million, and during the nine months ended September 30, 2003 and 2002, the Company recorded approximately $0.3 million and $0.4 million, respectively, related to stock-based compensation associated with Mr. Samenuk’s 2002 restricted stock grant.

Former employees. In July 2002, one of the Company’s employees became a non-employee, but continued to provide services to the Company. As he was allowed to continue to hold his vested employee options beyond the normal exercise period after termination and to continue to vest his options, the Company recorded a stock-based compensation charge corresponding to the fair value of his vested options. The unvested options have been and will be remeasured periodically using the Black Scholes option valuation model and recognized over the remaining vesting period using the accelerated method of amortization discussed in FIN 28. Stock-based compensation of approximately $35,000 was expensed during the nine months ended September 30, 2003 and approximately $0.1 million was expensed during the three and nine months ended September 30, 2002.

In October 2002, the Company terminated the employment of four former McAfee.com executives. These executives held McAfee.com options, which were exchanged for options to acquire the Company’s common stock. These options are subject to variable accounting as discussed above. Upon the executives’ termination, the options held by these individuals were modified in accordance with existing change in control agreements and became fully vested. After December 31, 2002, all remaining options held by these former McAfee.com executives were exercised within the first quarter of 2003. As a result, the Company recorded a final stock-based compensation charge of $1.1 million during the three months ended March 31, 2003.

Extended life of vested options held by terminated employees. In March 2003, the Company announced that the filing of its Form 10-K for 2002 would be postponed in order to restate prior financial results for 2000, 1999 and 1998. As a result, effective April 9, 2003, the Company suspended all exercises of stock options until the 2002 Form 10-K and all required quarterly reports on Form 10-Q were filed with the SEC, as these reports are incorporated by reference into the securities registration statements for each of the stock option plans. The period during which all stock option exercises are suspended is known as the blackout period. Due to the blackout period, the Company has extended the exercisability of any options that would otherwise terminate during the blackout period for a period of time equal to a specified period after termination of the blackout period. Accordingly, the Company has recorded a stock-based compensation charge on the date the options

should have terminated based on the intrinsic value of the option on the modification date and the option price. During the three and nine months ended September 30, 2003, the Company recorded a stock-based compensation charge of approximately $1.5 million and $2.0 million, respectively, for the extension of life of vested options held by terminated employees.

Repriced Options. During the three and nine months ended September 30, 2003, the Company did not incur a charge related to options subject to variable plan accounting. During the nine months ended September 30, 2002, stock-based compensation was reduced by approximately $6.5 million related to options subject to variable plan accounting. For the three and nine months ended September 30, 2003, the Company’s stock-based compensation charge calculation related to options subject to variable plan accounting were based on quarter-end per share price of the Company’s stock of $13.76. For the three and nine months ended September 30, 2002, the Company’s stock-based compensation charge calculation related to options subject to variable plan accounting were based on quarter-end per share price of $10.63. As of September 30, 2003 the Company had options to purchase approximately 0.8 million shares, which were outstanding and subject to variable plan accounting.

Extended vesting term of options. During the three months ended June 30, 2002, the Company recorded a one-time stock-based compensation charge of approximately $0.2 million as a result of the modification of the terms of the options previously granted to certain employees.

The Company also incurred a stock-based compensation charge in connection with the initial issuance of the repriced options. This charge was calculated based on the difference between the exercise price of the new options and their market value on the date of acceptance by employees. No charges were incurred for the three and nine months ended September 30, 2003 and approximately $1.0 million was expensed during the nine months ended September 30, 2002.

Extended period of Employee Stock Purchase Plan. In March 2003, the Company announced that the filing of its Form 10-K for 2002 would be postponed in order to restate prior financial results for 2000, 1999 and 1998. As a result, effective April 9, 2003, the Company suspended all stock purchases until the 2002 Form 10-K and all required quarterly reports on Form 10-Q are filed with the SEC, as these reports are incorporated by reference into the securities registration statements for the 2002 Employee Stock Purchase Plan (“2002 Purchase Plan”). The period during which all stock purchases are suspended is known as the blackout period. Due to the blackout period, the Company has extended the purchase period of the 2002 Purchase Plan that would otherwise had been purchased on July 31, 2003. Accordingly, the Company has recorded a stock-based compensation charge at the period ended September 30, 2003 and will continue to record a charge until the shares are purchased under the 2002 Purchase Plan. During the three and nine months ended September 30, 2003, the Company recorded a stock-based compensation charge of approximately $3.0 million for the extended period of the 2002 Purchase Plan.

Shares Purchased Outside Employee Stock Purchase Plan. On January 31, 2002, the Company experienced a shortfall in the number of shares available under the 1994 Employee Qualified Stock Purchase Plan to meet the requirements of the open purchase period. Although the Company reduced the number of shares available for purchase by plan participants by a pro rata amount, additional shares were required to be purchased outside of the plan. As a result, the Company recorded a one-time stock-based compensation charge of approximately $0.1 million in the three months ending March 31, 2002. The charge was based on the difference between the fair value of the shares purchased outside of the plan and the exercise price.

On May 14, 2003, the Company acquired 100% of the outstanding capital shares of IntruVert Networks, Inc., (“IntruVert”) a provider of network-based intrusion prevention solutions designed to proactively detect and stop system and network security attacks before they occur, for $103.4 million in cash. The Company

acquired IntruVert to enhance its intrusion detection product line. The results of operations of IntruVert have been included in these consolidated financial statements since the date of acquisition. Under the transaction, the Company recorded approximately $18.2 million for developed technology, $1.9 million for acquired product rights, including revenue related order backlog and contracts, $74.1 million for goodwill (none of which is deductible for tax purposes), $11.0 million for cash, $9.6 million for net deferred tax liabilities and $2.2 million for tangible assets, net of liabilities. The Company also recorded approximately $5.7 million for acquired in-process research and development which was fully expensed upon purchase because technological feasibility had not been established and there was no alternative use for the projects under development. The intangibles acquired in the acquisition, excluding goodwill, are being amortized over their estimated useful lives of two to five years or a weighted average period of 4.5 years. The Company also accrued approximately $0.3 million in duplicative site costs related to the IntruVert acquisition of which $0.1 million remains as an accrual as of September 30, 2003.

As part of the IntruVert acquisition, the Company cancelled all outstanding IntruVert restricted stock and outstanding stock options and agreed to make cash payments to former IntruVert employees contingent upon their continued employment with the Company based on the same vesting terms of their restricted stock or stock option agreements. The payments to former IntruVert employees are recorded ratably over the vesting period as salary expense as the employees are currently providing services to the Company. Payments under the restricted stock plan are paid monthly from an escrow account and will total approximately $3.0 million from the purchase date through the fourth quarter of 2006. Payments under the stock option plan are being paid monthly through the Company’s payroll and will total approximately $4.1 million from the purchase date through the second quarter of 2007. Cash payments that were fully vested at the date of the acquisition were included in the purchase price. If a former IntruVert employee ceases employment with the Company, unvested payment amounts will be returned to the Company.

On April 30, 2003, the Company acquired 100% of the outstanding capital shares of Entercept Security Technologies, Inc. (“Entercept”), a provider of host-based intrusion prevention solutions designed to proactively detect and stop system and network security attacks before they occur, for $125.7 million in cash. The Company acquired Entercept to enhance its intrusion detection product line. The results of operations of Entercept have been included in these consolidated financial statements since the date of acquisition. Under the transaction, the Company recorded approximately $21.7 million for developed technology, $2.8 million for acquired product rights, including revenue related order backlog and contracts, $101.0 million for goodwill (none of which is deductible for tax purposes), $0.7 million for net deferred tax assets, $3.7 million for tangible assets, $1.0 million for cash and $6.0 million in liabilities. The Company also recorded approximately $0.9 million for acquired in-process research and development which was fully expensed upon purchase because technological feasibility had not been established and there was no alternative use for the projects under development. The intangibles acquired in the acquisition, excluding goodwill, are being amortized over their estimated useful lives of two to six years or a weighted average period of 5.6 years. The Company also accrued approximately $2.8 million in duplicative sites costs related to acquired facilities to be exited, of which $2.6 million remains as an accrual as of September 30, 2003.

As part of the Entercept acquisition, the Company assumed all outstanding unvested Entercept cash bonus units and agreed to make specified per unit cash payments to former Entercept employees contingent upon their continued employment with the Company for one year based on the vesting terms of such units, generally one year. The payments to former Entercept employees are expensed monthly as salary expense as the employees are currently providing services to the Company. Total payments subject to remaining vesting are estimated to be $2.4 million. Amounts to be paid under the cash bonus plan are held in escrow and will be paid generally at the end of one year from the Entercept purchase date. Employees that are no longer with the Company at the payment date will not receive any payment, and any forfeited payments will be allocated to Entercept stockholders.

The Company has obtained preliminary independent appraisals of the fair values of the acquired equipment, identified intangible assets and their remaining useful lives. The Company is also completing the review and determination of the fair values of the other assets and liabilities assumed. Accordingly, the allocations of the purchase price are subject to revision, which is not expected to be material, based on the final determination of appraised and other fair values. A summary of the assets acquired and liabilities assumed in the acquisitions follows:

The following unaudited pro forma financial information presents the combined results of the Company, IntruVert and Entercept as if the acquisitions had occurred on January 1, 2002, after giving effect to certain adjustments, including amortization of identifiable intangible assets (in thousands except per share amounts):

On September 13, 2002, the Company repurchased the 25% minority interest in its McAfee.com subsidiary for $219.9 million in cash and stock. The Company issued 8.3 million shares of its common stock valued at $14.62 per share, which corresponds to the average market price of the Company’s common stock two days before and after the date the terms of the acquisition were established. The acquisition was an effort to reduce or eliminate customer, market and brand confusion due to the similarity in its products, names and

web addresses and to reduce or eliminate actual and potential conflicts between the companies and their sales forces, and related senior management distraction, due to confusion over market boundaries. This acquisition increased the Company’s ownership of McAfee.com to a 100% interest and was accounted for using the purchase method of accounting. As part of the acquisition, McAfee.com was merged with and into the Company. The results of operations of McAfee.com have always been included in the consolidated income (loss) before minority interest of the Company. Prior to the acquisition, the minority interest in the McAfee.com income (loss) was excluded from the Company’s consolidated net income (loss). Since the date of acquisition on September 13, 2002, no minority interest exists in McAfee.com and accordingly the consolidated net income (loss) includes the full amount of McAfee.com results from this date. The aggregate purchase price was allocated to tangible and identified intangible assets acquired and liabilities assumed based on preliminary estimates of fair value. Identifiable intangible assets totaled $50.7 million and are amortized using an estimated useful life identified for each type of intangible ranging from two to seven years, or a weighted average period of 6.7 years. The excess of the aggregate purchase price over the fair value of the identifiable net assets acquired of approximately $145.8 million has been recognized as goodwill of which none will be deductible for tax purposes.

The following table summarizes the final fair values of the assets acquired and liabilities assumed at the date of acquisition.

The following unaudited pro forma financial information presents the combined results of the Company and McAfee.com as if the acquisition had occurred on January 1, 2002, after giving effect to certain adjustments, including amortization of identifiable intangible assets (in thousands except per share amounts):

The above pro forma financial information includes adjustments for interest income on cash disbursed for the acquisition, amortization of identifiable intangible assets and adjustments for the expenses incurred by McAfee.com related to the exchange offer for all McAfee.com outstanding publicly held shares. The expenses incurred by McAfee.com amounted to $3.0 million in the nine months ended September 30, 2002. The pro forma information is based on various assumptions and estimates.

The pro forma information set forth above with respect to the IntruVert, Entercept and McAfee.com acquisitions is not necessarily indicative of the operating results that would have occurred if these acquisitions had been consummated as of January 1, 2002, nor is it necessarily indicative of future operating results. The pro forma information does not give effect to any potential revenue enhancements or cost synergies or other operating efficiencies that could result from the acquisitions.

On October 9, 2001, the Board of Directors of the Company approved a plan to integrate the activities of the Company’s PGP product group into its other product groups. In addition to the integration plan, the Company began to look for a buyer for the PGP desktop encryption and Gauntlet firewall product lines. On February 13, 2002, the Company announced the sale of Gauntlet firewall/ VPN product lines to Secure Computing. As a result of the transaction, the Company received common shares of Secure Computing in exchange for the Gauntlet assets. The Company recorded a gain on sale of net assets of $6.7 million. On August 19, 2002, the Company announced the sale of PGP desktop encryption to PGP Corporation, a new venture funded company, for $2.0 million in cash and assumption of net liabilities of $1.1 million. As a result of the transaction, the Company recorded a gain on sale of product lines of $2.6 million in the third quarter of 2002.

In March 2002, the Company purchased a one-year collar consisting of 300,354 purchased put options with a strike price of $17.31 and the same number of written call options with a strike price of $22.04. Underlying both the put and call options are the Secure Computing shares. The Company designated the purchased collar as a fair value hedge of the Secure Computing available-for-sale securities in accordance with SFAS No. 133 “Accounting for Derivative Instruments and Hedging Activities.” At the inception of the hedge, the Company assessed that the collar is highly effective based upon expected changes in the collar’s intrinsic value. On an ongoing basis, changes in the fair value of Secure Computing shares within the collar’s range of $17.31 and $22.04 are recorded as part of accumulated other comprehensive income within stockholders’ equity. Changes in the fair value of Secure Computing’s shares outside of the collar range of $17.31 and $22.04 are recorded immediately in earnings. Changes in the fair value of the collar are measured using an option pricing model and are also recorded immediately in earnings. During the nine months ended September 30, 2002, the Company recognized a loss of $0.2 million in the earnings relating to the change in fair value of the collar, net of changes of fair value of the Secure Computing shares outside of the collar range. In July 2002, the Company sold its shares in Secure Computing, closed its collar and recorded a net gain of $0.3 million.

The Company accounts for goodwill and other intangible assets in accordance with SFAS No. 142, “Goodwill and Other Intangible Assets.” In lieu of amortization, the Company performs an impairment review of its goodwill balance on at least an annual basis. This impairment review involves a two-step process. The Company performed Step 1 of the initial goodwill impairment analysis as of January 1, 2002, and concluded that goodwill was not impaired, as the fair value of each reporting unit exceeded its carrying value, including goodwill. Accordingly, Step 2 was not performed. As required, the Company completed its annual goodwill impairment review as of October 1, 2002 and concluded that goodwill was not impaired. The fair value of the reporting units was estimated using the average of the expected present value of future cash flows and of the

market multiple value. The Company will continue to test for impairment on an annual basis and on an interim basis if an event occurs or circumstances change that would more likely than not reduce the fair value of the Company’s reporting units below their carrying amounts.

The components of intangible assets, excluding goodwill, are as follows (in thousands):

The aggregate amortization expenses for the intangible assets listed above totaled $7.1 million and $3.1 million for the three months ended September 30, 2003 and 2002, respectively, and $20.3 million and $8.5 million for the nine months ended September 30, 2003 and 2002, respectively.

Expected future intangible asset amortization expense is as follows (in thousands):

In January 2003, as part of a restructuring effort to gain operational efficiencies, the Company consolidated operations formerly housed in three leased facilities in the Dallas, Texas area into its newly

constructed 170,000 square-foot regional headquarters facility in Plano, Texas. The new facility houses approximately 1,000 employees working in finance, legal, information technology, and the customer support and telesales groups servicing the McAfee System Protection Solutions and McAfee Network Protection Solutions businesses. As part of the consolidation of activities into the Plano facility, the Company relocated approximately 170 employees from its Santa Clara, California headquarters site. As a result of this consolidation, in March 2003, the Company recorded a restructuring charge of $15.8 million which consisted of a non-cash charge of $2.1 million related to asset disposals and discontinued use of certain leasehold improvements and furniture and equipment; non-cash write off of $(1.9) million deferred rent liability; and a $15.6 million accrual for estimated lease related costs associated with vacated facilities in Santa Clara, California. The remaining costs associated with permanently vacating the Santa Clara facilities are primarily comprised of the present value of remaining lease obligations, net of estimated sublease income, along with costs associated with subleasing the vacated facilities. The remaining costs associated with permanently vacating the facilities will generally be paid over the remaining lease term ending in 2013. The total restructuring charge and related cash outlay are based on management’s current estimates. Amounts to be paid, relative to the restructuring accrual, within 12 months ($1.9 million) have been included in accrued liabilities, while amounts to be paid beyond 12 months ($12.7 million) have been included in other long term liabilities in these condensed consolidated financial statements.

During the second quarter and third quarter of 2003, the Company recorded a restructuring charge of $6.8 million and $0.3 million, respectively, which consisted of $6.6 million related to a headcount reduction of 210 employees and $0.6 million related to other expenses such as legal expenses incurred in international locations in conjunction with the headcount reduction. The employees were located in the Company’s domestic and international locations and were primarily in the sales, product development and customer support areas.

The following table sets forth the Company’s restructuring accrual established in 2003 (in thousands):

The Company’s estimates of the excess facilities charge may vary significantly depending, in part, on factors which may be beyond the Company’s control, such as the Company’s success in negotiating with its lessor, the time periods required to locate and contract suitable subleases and the market rates at the time of such subleases. Adjustments to the facilities accrual will be made if further consolidations are required or if actual lease exit costs or sublease income differ from amounts currently expected. The restructuring charge was not allocated to reporting segments.

As part of the plan to integrate certain activities of the Company’s PGP product group into its McAfee Security and Sniffer product group and to dispose of other product lines, the Company sold its Gauntlet business during the first quarter of 2002. In connection with this process, a cash restructuring charge of approximately $1.1 million was recorded during the first quarter of 2002. The restructuring charge consisted of costs of severance packages for 44 employees as well as related legal and outplacement services.

The following table sets forth the Company’s restructuring accrual established in February 2002 and the activity against the accrual during the six months ended June 30, 2002 (in thousands):

On February 13, 1998, the Company completed a private placement of zero coupon convertible subordinated debentures due in 2018 (“Debentures”). The Debentures, with an aggregate face amount at maturity of $885.5 million, generated net proceeds to the Company of approximately $337.6 million. The initial price to the public for the Debentures was $391.06 per $1,000 of face amount at maturity, which equates to a yield to maturity over the term of the Debentures of 4.75% (on a semi-annual bond equivalent basis).

Periodically, through a limited number of privately negotiated purchases, the Company repurchased previously outstanding Debentures. In 2002, the Company repurchased Debentures, which had an aggregate face amount at maturity of $140.0 million, at a net price of $66.2 million. In connection with these repurchases, the Company recognized a gain of approximately $26,000, calculated as the difference between the accreted value of the debt, net of unamortized issuance costs, and the cost of repurchase.

The remainder of the outstanding Debentures, with an aggregate face amount at maturity of $358.5 million became redeemable for cash at the option of the holders of the Debentures beginning on February 13, 2003, at which time the Company repurchased Debentures which had an aggregate face amount at maturity of $358.0 million and an accreted carrying value of $177.2 million at February 13, 2003 for a net price of $177.1 million. On June 9, 2003, the Company repurchased the remaining Debentures with an aggregate face amount at maturity of $0.5 million for a net price of $0.2 million. In connection with these repurchases, the Company recognized a loss of approximately $2.6 million and $0.1 million, respectively, calculated as the difference between the accreted value of the debt, net of unamortized issuance costs, and the cost of repurchase.

On August 17, 2001, the Company issued 5.25% convertible subordinated notes (“Notes”) due 2006 with an aggregate principal amount of $345.0 million. The issuance generated net proceeds (after deducting fees and expenses) of approximately $335.1 million. The amortization of the issuance costs related to the Notes is calculated using the effective interest method. The Notes mature on August 15, 2006, unless earlier redeemed by the Company at its option or converted at the holder’s option. Interest is payable in cash semi-annually in arrears on February 15 and August 15 of each year, commencing February 15, 2002.

At the option of the holder, Notes may be converted into the Company’s common stock at any time, unless previously redeemed, at a conversion price of $18.07 per share. The Notes may also be redeemed at the option of the holder in the event of a Change of Control (as defined in the related indenture). At any time between August 20, 2004 and August 14, 2005, the Company may redeem all or a portion of the Notes for cash at a redemption price of 101.3125% of the principal amount. After August 14, 2005, the redemption price is 100.0% of the principal amount. The Notes are unsecured and are subordinated to all existing and future Senior Indebtedness (as defined in the related indenture). In July 2002, the Company entered into an interest rate swap transaction with two investment banks, which under US GAAP, required that the convertible notes be carried at fair value.

In July 2002, the Company entered into interest rate swap transactions (“Transactions”) with two investment banks (“Banks”) to hedge the interest rate risk of its outstanding 5.25% Convertible Subordinated Notes due 2006 (“Notes”). The notional amount of the Transactions was $345.0 million to match the entire principal amount of the Notes. The Company will receive from the Banks fixed payments equal to 5.25% of the notional amount, payable on February 15 and August 15 starting on August 15, 2002. In exchange, the Company will pay to the Banks floating rate payments based upon the London InterBank Offered Rate (“LIBOR”) plus 1.66% multiplied by the notional amount of the Transactions with the LIBOR resetting every three months beginning August 15, 2002. The LIBOR was 1.13% at September 30, 2003.

The Transactions will terminate on August 15, 2006 (“Termination Date”), subject to certain early termination provisions if on or after August 20, 2004 and prior to August 15, 2006, the twenty-day average closing price of the Company’s common stock equals or exceeds $22.59. Depending on the timing of the early termination event, the Banks would be obligated to pay the Company an amount equal to the redemption premium called for under the terms of the Notes.

The Transactions qualified as, and were designated as, a fair value hedge against movements in the fair value of the Notes due to changes in the benchmark interest rate. To test the effectiveness of the hedge, regression analysis is performed at least quarterly comparing the change in fair value of the Transactions and the Notes. The fair values of the Transactions and the Notes are calculated as the present value of the contractual cash flows to the expected maturity date, where the expected maturity date is based on probability-weighted analysis of interest rates relating to the five-year LIBOR curve and the Company’s stock prices. For the three and nine months ended September 30, 2003, the hedge was highly effective and therefore, the ineffective portion did not have a material impact on earnings.

Under the fair value model, the derivative is recognized at fair value on the consolidated balance sheet with an offsetting entry to the statement of operations. In addition, changes in the fair value of the Notes due to changes in the benchmark interest rate are recognized as a basis adjustment to the carrying amount of the Notes with an offsetting entry to the statement of operations.

The gain or loss from the change in fair value of the Transaction and the offsetting change in the fair value of the Notes are recognized as interest expense in these condensed consolidated financial statements. The net gain recorded for the three and nine months ended September 30, 2003, was $1.7 million and

$3.8 million, respectively. The net expense recorded for the three and nine months ended September 30, 2002 was $0.8 million.

In support of the Company’s obligations under the Transactions, the Company is required to maintain with the Banks a minimum level of cash and investment collateral of $20.0 million and periodically adjust the overall level of collateral depending on the fair market value of the Transactions. This minimum amount of collateral is included in restricted cash on the condensed consolidated balance sheet.

A reconciliation of the numerator and denominator of basic and diluted net income per share is provided as follows (in thousands, except per share amounts):

(1)

Diluted net income per share excludes the effects of shares which will be issued in the event of conversion of the Company’s outstanding convertible debt. The total number of shares excluded from the calculation related to as-if converted shares which have an antidilutive effect was 19.1 million for the three and nine months ended September 30, 2003 and 3.1 million for the three and nine months ended September 30, 2002.

The Company has concluded that it has one business and operates in one industry, developing, marketing, distributing and supporting computer security solutions for large enterprises, governments, educational institutions, small and medium size businesses and consumer users, as well as resellers and distributors. Management measures profitability based on the Company’s five geographic regions. The regions are evidence of the operating structure of the Company’s internal organization.

The Company markets and sells, through its geographic regions, anti-virus and security software, hardware and services; network management software, hardware and services; and help desk software and services. These products and services are marketed and sold worldwide directly to consumers, corporate and government users, as well as through resellers, distributors, systems integrators and retailers. In addition, the Company offers web sites, which provide suites of on-line products and services personalized for the user based on the users’ PC configuration, attached peripherals and resident software. The Company also offers managed security and availability applications to corporations and governments on the Internet.

Following is the summary of the Company’s revenue and income (loss) from operations by geographic region. The accounting policies of the businesses and geographic regions are the same as disclosed in Note 3 to the Notes to Condensed Consolidated Financial Statements in the Company’s Annual Report on 10-K for 2002. To reconcile to the consolidated financial statements, where applicable, “Corporate” represents costs and expenses associated with corporate activities. Corporate activities include general and administrative expenses, corporate marketing expenses, amortization of intangibles, stock-based compensation charges, and restructuring costs. These corporate expenses are not considered attributable to any specific geographic region.

Summarized financial information concerning the Company’s net revenue and operating income (losses) by business and geographic region is as follows (in thousands):

Net revenue information on a product and service basis is as follows (in thousands):

From time to time, the Company has been subject to litigation including the pending litigation described below. The Company’s current estimated range of liability related to some of the pending litigation below is based on claims for which management can estimate the amount and range of loss. The Company has

recorded the minimum estimated liability related to those claims, where there is a range of loss. Because of the uncertainties related to both the amount and range of loss on the remaining pending litigation, management is unable to make a reasonable estimate of the liability that could result from an unfavorable outcome. As additional information becomes available, the Company will assess its potential liability and revise its estimates. Pending or future litigation could be costly, could cause the diversion of management’s attention and could upon resolution, have a material adverse effect on the business, results of operations, financial condition and cash flow.

In addition, the Company is engaged in certain legal and administrative proceedings incidental to its normal business activities and believes that these matters will not have a material adverse effect on its financial position, results of operations or cash flows.

Between December 29, 2000 and February 7, 2001, the Company and certain of its current and former officers and directors were named in securities class action lawsuits filed in the United States District Court for the Northern District of California. On September 24, 2001, a consolidated class action complaint, styled In re Network Associates, Inc. II Securities Litigation, was filed which asserts claims against the Company, William Larson, Prabhat Goyal and Peter Watkins on behalf of a putative class of persons who purchased the Company’s stock between July 19 and December 26, 2000. The complaint asserts causes of action (and seeks unspecified damages) for alleged violations of Exchange Act Section 10(b)/ SEC Rule 10b-5 and Exchange Act Section 20(a). In particular, the complaint alleges that defendants engaged in improper practices designed to increase the Company’s revenues and earnings and that, as a result of those practices, the Company’s class period financial statements were false and misleading and failed to comply with Generally Accepted Accounting Principles (“GAAP”). After a hearing on defendants’ motion to dismiss was held on April 16, 2002, the Court entered an order approving a jointly stipulated withdrawal of defendants’ motion to dismiss. On September 30, 2002, plaintiffs filed a first amended and consolidated complaint. The amended and consolidated complaint asserts claims on behalf of an expanded class of plaintiffs, i.e., persons who purchased the Company’s stock between April 15, 1999 and December 26, 2000, and, in addition to reasserting the allegations contained in the consolidated complaints, adds allegations regarding the Company’s restatement of its 1998, 1999, and 2000 consolidated financial statements, which restatement resulted from the Company’s discovery of certain accounting inaccuracies impacting those consolidated financial statements. The first amended and consolidated complaint also adds Terry Davis, the Company’s former Controller as a party defendant. On November 11, 2002, the Company and the individual defendants each moved to dismiss certain claims asserted on the first amended and consolidated compliant. Prior to the hearing on Defendant’s motions, which took place on February 11, 2003, plaintiff voluntarily dismissed Peter Watkins as a party defendant in the lawsuit. A decision on the remaining motions to dismiss was issued on March 25, 2003, where the Court granted, in part, defendants’ motion to dismiss. On September 23, 2003, the Company and the plaintiffs entered into a memorandum of agreement of settlement settling the matter for $70 million. This amount was accrued for in the fourth quarter of 2002. The settlement was preliminarily approved by the court on October 22, 2003 and is subject to notice to and opportunity to object and opt-out by members of the class and final approval by the court following a hearing on any objections to the settlement.

On February 5, 2001, the Company was nominally sued in a derivative lawsuit filed in the Superior Court in Santa Clara County. The lawsuit, captioned Mead Ann Krim v. William L. Larson, et al., Case No. CV795734, asserts claims against William Larson, Peter Watkins, Prabhat Goyal, Leslie Denend, Virginia Gemmell, Edwin Harper, Enzo Torresi (collectively the “individual defendants”), and PricewaterhouseCoopers LLP for breach of fiduciary duty, unjust enrichment and professional negligence against the accountants. In particular, the complaint alleges that the defendants engaged in a course of conduct by which they improperly accounted for revenue from software license sales, and that, as a result of their actions, certain of the Company’s consolidated financial statements were false and misleading and not in compliance

with GAAP. The complaint seeks an unspecified amount of damages. Nominal defendant Network Associates, Inc. filed a demurrer to the complaint on May 21, 2001. A hearing on the demurrer was held on June 29, 2001. On July 24, 2001, the Court sustained the demurrer with leave to amend. By Order dated August 21, 2001, the Court granted plaintiff limited discovery for purposes of amending the complaint to meet the demand futility test imposed by Delaware law. Plaintiff filed an amended complaint on December 26, 2001. Nominal defendant Network Associates, Inc. filed a demurrer, which was joined by the individual defendants, to the amended complaint on January 30, 2002. A hearing on the demurrer was held on March 8, 2002. The Court entered an order on March 28, 2002 sustaining the demurrer without leave to amend and dismissing the amended complaint with prejudice. Plaintiff filed a Notice of Appeal in the California Court of Appeals, Sixth Appellate District on June 24, 2002. On December 19, 2002, plaintiff filed a motion seeking the Court’s approval of the parties’ settlement stipulation and dismissal of the case with prejudice. By order dated January 7, 2003, the Court entered the parties’ stipulation and dismissed the case with prejudice as to all parties and all claims.

In March 2002, several putative securities class action lawsuits were filed in the Court of Chancery in the State of Delaware, County of New Castle, and the Superior Court of the State of California, County of Santa Clara, arising out of the Company’s proposed acquisition of McAfee.com Corporation (“McAfee.com”). The lawsuits named as defendants Network Associates and certain of McAfee.com’s officers and directors, and with respect to the Delaware Court of Chancery actions, McAfee.com. The lawsuit filed in Santa Clara County is encaptioned Peyton v. Richards, et al., No. CV806199. The lawsuits filed in the Delaware Court of Chancery, which were encaptioned Bank v. McAfee.com Corp., et al., Civil Action No. 19481; Birnbaum v. Sampath, et al., Civil Action No. 19482 NC; Brown v. Sampath, et al., Civil Action No. 19483 NC; Chin v. McAfee.com Corp., et al., Civil Action No. 19484 NC; Monastero v. Sampath, et al., Civil Action No. 19485; and Ebner v. Sampath, et al., Civil Action No. 19487, were consolidated into a single case (the “Consolidated Action”) by Court order dated April 9, 2002. Plaintiffs amended the complaint in the Consolidated Action on July 8, 2002. The second amended complaint asserts claims against defendants for breach of fiduciary duty on the grounds that (i) the price at which Network Associates proposed to consummate the current exchange offer purportedly was unfair and inadequate, and (ii) defendants purportedly failed to disclose information material to assessing the propriety of the exchange offer. The plaintiffs seek, among other things, to recover unspecified damages and costs and to enjoin or rescind the transaction contemplated by the offer. On September 19, 2002 the parties entered into a memorandum of understanding. On July 18, 2003, the Delaware Court of Chancery approved the settlement, and the case was dismissed. Another class action lawsuit was filed on April 9, 2002 in the United States District Court for the Northern District of California, encaptioned Getty v. Sampath, et. al., Case No. C 02 1692. On September 30, 2002, the parties in the Getty action filed a joint request with United States District Court for the entry of an order staying the Getty proceedings until after the Delaware Chancery Court has an opportunity to approve the proposed settlement in the Delaware Consolidated Action. On April 2, 2002, defendants removed the California state action encaptioned Peyton v. Richards, et al., No. CV 806199 to the United States District Court for the Northern District of California. Subsequently, by stipulation filed June 20, 2002, the parties in Peyton agreed for the action to be remanded to California Superior Court for the County of Santa Clara solely for the purpose of allowing plaintiff Justin Peyton to dismiss the action. On July 1, 2002, a putative class action lawsuit encaptioned Peyton v. Richards, et al., Case No. CV 809111, was filed in the California Superior Court for the County of Santa Clara against Network Associates and various officers and directors of McAfee.com. The complaint generally alleges that (i) the defendant directors of McAfee.com are liable for breach of fiduciary duty because they failed to maximize the price of Network Associates’ exchange offer, and (ii) defendant Network Associates aided and abetted these breaches of fiduciary duty by structuring the exchange offer in terms preferential to Network Associates. The plaintiff seeks, among other things, to enjoin or rescind the transaction contemplated by the offer, to recover costs, and to impose a constructive trust upon any benefits improperly received by defendants. On September 20, 2002, the Superior Court entered an order approving the parties’ joint stipulation to stay the Peyton proceedings pending the Delaware Chancery Court’s

approval of the proposed settlement in the Delaware Consolidated Action. On August 14, 2003, the parties entered into a stipulation for an order that would dismiss the Peyton action with prejudice.

Certain investment bank underwriters, the Company, and certain of the Company’s directors and officers have been named in a putative class action for violation of the federal securities laws in the United States District Court for the Southern District of New York, captioned In re McAfee.com Corp. Initial Public Offering Securities Litigation, 01 Civ. 7034 (SAS). This is one of a number of cases challenging underwriting practices in the initial public offerings (“IPOs”) of more than 300 companies. These cases have been coordinated for pretrial proceedings as In re Initial Public Offering Securities Litigation, 21 MC 92 (SAS). Plaintiffs generally allege that certain underwriters engaged in undisclosed and improper underwriting activities, namely the receipt of excessive brokerage commissions and customer agreements regarding post-offering purchases of stock in exchange for allocations of IPO shares. Plaintiffs also allege that various investment bank securities analysts issued false and misleading analyst reports. The complaint against the Company claims that the purported improper underwriting activities were not disclosed in the registration statements for McAfee.com’s IPO and seeks unspecified damages on behalf of a purported class of persons who purchased the Company’s securities or sold put options during the time period from December 1, 1999 to December 6, 2000. On February 19, 2003, the Court issued an Opinion and Order dismissing certain of the claims against the Company with leave to amend. A settlement proposal was accepted by the Company on July 15, 2003 and is awaiting Court approval.

On February 6, 2002, the Attorney General of the State of New York filed a Petition in the Supreme Court, New York County, alleging that certain restrictions posted by the Company on and with its software are deceptive, unenforceable and illegal. The challenged restrictions relate to publication of benchmark tests and reviews concerning the Company’s software products. The Petition seeks damages, costs and an injunction requiring the Company to give notice to the Attorney General before making any representations to consumers concerning “the right to review, test or criticize” its products. This is a “special proceeding” under New York law. The Company filed papers in opposition to the Petition in which it denied the substantive allegations of the Petition and asserted various affirmative defenses. By a Final Order of the Supreme Court, New York County dated May 6, 2003, the Company and the Attorney General of the State of New York resolved the action.

On March 22, 2002, the Securities and Exchange Commission (“SEC”) notified the Company that it had commenced a “Formal Order of Private Investigation” into the Company’s accounting practices. The SEC investigation is continuing, and the Company continues to provide documents and information to the SEC.

Under the terms of the Company’s software license agreements with its customers, the Company agrees that in the event the software sold infringes upon any patent, copyright, trademark, or any other proprietary right of a third party, it will indemnify its customer, licensees, against any loss, expense, or liability from any damages that may be awarded against its customer. The Company includes this infringement indemnification in all of its software license agreements and selected managed service arrangements. In the event the customer cannot use the software or service due to infringement and the Company can not obtain the right to use, replace or modify the license or service in a commercially feasible manner so that it no longer infringes then the Company may terminate the license and provide the customer a pro-rata refund of the fees paid by the customer for the infringing license or service. The Company has recorded no liability associated with this indemnification, as it is not aware of any pending or threatened infringement actions that are probable losses.

Under the terms of certain vendor agreements, in particular, vendors used as part of the Company’s managed services, the Company agreed that in the event the service provided to the customer by the vendor on behalf of the Company infringes upon any patent, copyright, trademark, or any other proprietary right of a third party, it will indemnify its vendor, against any loss, expense, or liability from any damages that may be awarded against its customer. No maximum liability is stipulated in these vendor agreements. The Company has recorded no liability associated with this indemnification, as it is not aware of any pending or threatened infringement actions or claims that are probable losses.

Under the terms of the Company’s agreements to sell the PGP and Gauntlet assets the Company agreed to indemnify the purchasers for any breach of representations or warranties in the agreement as well as for any liabilities related to the assets prior to sale that are not included in the purchaser assumed liabilities (undiscovered liabilities). The maximum potential loss related to the indemnification for breach of representations or warranties is $2.4 million. No maximum liability is stipulated in the agreement related to any undiscovered liabilities. To date the Company has paid $0.4 million under the representations and warranties indemnification.

The Company has agreed to indemnify members of the board of directors as well as officers of the Company if they are made a party or are threatened to be made a party to any proceeding (other than an action by or in the right of the Company) by reason of the fact that they are an agent of the Company, or by reason of anything done or not done by them in any such capacity. The indemnity is for any and all expenses and liabilities of any type whatsoever (including but not limited to, judgements, fines and amounts paid in settlement) actually and reasonably incurred by the directors or officers in connection with the investigation, defense, settlement or appeal of such proceeding, provided they acted in good faith. The Company maintains insurance coverage for directors and officers liability (“D&O insurance”). No maximum liability is stipulated in these agreements that include indemnifications of members of the board of directors and officers of the Company. The Company has recorded no liability associated with these indemnifications as it is not aware of any pending or threatened actions or claims against it members of board of directors or officers that are probable losses in excess of amounts covered by its D&O insurance.

If the Company believes a liability associated with any of the aforementioned indemnifications obligations becomes probable and the amount of the liability is reasonably estimable or the maximum amount of a range of loss is reasonably estimable, then an appropriate liability will be established.

Some of the statements contained in this Report on Form 10-Q are forward-looking statements that involve risks and uncertainties. The statements contained in this Report on Form 10-Q that are not purely historical are forward-looking statements within the meaning of Section 27A of the Securities Act and Section 21E of the Exchange Act, including, without limitation, statements regarding our expectations, beliefs, intentions or strategies regarding the future. All forward-looking statements included in this Report on Form 10-Q are based on information available to us on the date hereof, and we assume no obligation to update any such forward-looking statements. These statements involve known and unknown risks, uncertainties and other factors that may cause our actual results to differ materially from those implied by the forward-looking statements. In some cases, you can identify forward-looking statements by terminology such as “may,” “will,” “should,” “could,” “expects,” “plans,” “anticipates,” “believes,” “estimates,” “predicts,” “potential,” “targets,” “goals,” “projects,” “continue,” or variations of such words, similar expressions, “continue” or the negative of these terms or other comparable terminology. Although we believe that the expectations reflected in the forward-looking statements are reasonable, we cannot guarantee future results, levels of activity, performance or achievements. Therefore, actual results may differ materially and adversely from those expressed in any forward-looking statements. Moreover, neither we nor any other person nor we assume responsibility for the accuracy and completeness of such statements. Important factors that may cause actual results to differ from expectations include, but are not limited to, those discussed in “Risk Factors” beginning on page 53 of this document. We undertake no obligation to revise or update publicly any forward-looking statements for any reason.

This report includes registered trademarks and trade names of Network Associates and other corporations. Trademarks or trade names owned by Network Associates and/or our affiliates include the marks: “Network Associates,” “Magic Solutions,” “McAfee” and “Sniffer.”

The following discussion should be read in conjunction with the condensed consolidated financial statements and related notes included elsewhere in this report. The results shown herein are not necessarily indicative of the results to be expected for the full year or any future periods.

We are a leading supplier of computer security solutions designed to prevent intrusions on networks and protect computer systems from the next generation of blended attacks and threats. We offer two families of products, McAfee System Protection Solutions and McAfee Network Protection Solutions. Our computer security solutions are offered primarily to large enterprises, governments, small and medium-sized business and consumer users. We operate our business in five geographic regions: North America; Europe Middle East and Africa (“EMEA”); Japan; Asia-Pacific and Latin America. See Note 12 to the condensed consolidated financial statements.

We recently launched our McAfee Protection-in-Depth Strategy, designed to provide a complete set of system and network protection solutions differentiated by intrusion prevention technology that can detect and block known and unknown attacks. To more effectively market our products in our various geographic sales regions, we have combined complementary products into separate product groups, as follows:


	•	McAfee System Protection Solutions, which delivers world-class anti-virus and security products and services designed to protect systems such as desktops and servers. McAfee System Protection Solutions also includes our Magic Service Desk family of products designed to offer management and visibility of desktop and server systems; and;

	•	McAfee Network Protection Solutions, which offers products designed to maximize the performance and security of networks, including Sniffer network analysis and availability technologies, network intrusion prevention with McAfee IntruShield and InfiniStream Security Forensics.

The majority of our net revenue has historically been derived from our McAfee Security anti-virus products and our Sniffer network fault identification and application performance management products. In addition to these two flagship products, we have focused our efforts on building a full line of complementary network and system protection solutions. On the system protection side, we strengthened our anti-virus lineup by adding complementary products in the anti-spam and host intrusion prevention categories. On the network protection side, we built upon our Sniffer line by adding products in the network monitoring, network reporting, network application performance monitoring, network intrusion prevention, and forensics categories. We continuously seek to expand our product lines.

In the three and nine months ended September 30, 2003, our net revenue was approximately $226.9 million and $663.6 million, respectively, and our net income was approximately $9.9 million and $25.2 million, respectively. In the three and nine months ended September 30, 2002, our net revenue was approximately $254.4 million and $773.5 million, respectively, and our net income was approximately $34.1 million and $139.5 million, respectively.

McAfee System Protection Solutions help enterprises, small businesses, consumers and government agencies assure the availability and security of their desktops, application servers and web service engines. The McAfee System Protection Solutions portfolio features a range of products including anti-virus, managed services, McAfee SpamKiller anti-spam solutions, McAfee ThreatScan vulnerability assessment and McAfee Entercept for host-based intrusion prevention. Each is backed by the McAfee Anti-Virus Emergency Response Team, a leading threat research organization.

McAfee System Protection Solutions also includes McAfee Consumer Security, offering both traditional retail products and our on-line subscription services. Our consumer retail and on-line subscription application services allow users to protect their PCs from malicious code and other attacks, repair PCs from damage caused by viruses, and block spam and other undesirable content. Our retail products are sold through retail outlets, including Best Buy, CompUSA, Dixons and Staples, to single users and small home offices in the form of traditional boxed product. These products include free and for fee software updates and technical support services. Our on-line subscription services are delivered through the use of an Internet browser at our McAfee.com web site and through multiple on-line service providers.

McAfee System Protection Solutions also include our Magic Service Desk family of products offering management and visibility of desktop and server systems. Magic Service Desk is a modularized workflow engine for collecting, tracking, managing and reporting. This product is primarily used to manage service items, manage people resources, manage assets and assist in tracking successful change within an organization. Magic Service Desk is complimented by solutions allowing for remote diagnostics and asset discovery. Customers for these products are corporate, governmental and educational organizations.

McAfee Network Protection Solutions help enterprises, small businesses, government agencies, educational organizations and service providers maximize the availability, performance and security of their network infrastructure. The McAfee Network Protection Solutions portfolio features a range of products including Sniffer and the nPO Solution for network management. Sniffer’s products capture data, monitor network traffic and collect and report on key network statistics. These products are also designed to optimize network and application performance and increase network reliability by uncovering and analyzing network problems and network security vulnerabilities and recommending solutions to such problems. Other McAfee Network Protection Solutions products include InfiniStream Security Forensics for security forensics and McAfee IntruShield for network intrusion detection and prevention. Customers for these products are enterprises and government agencies, as well as service providers.

We have established Expert Services and Technical Support to provide professional assistance in the design, installation, configuration and implementation of our customers’ networks and acquired products. Expert Services is focused on two service markets: Consulting Services and Education Services.

Consulting Services supports product integrations and deployment with an array of standardized and custom offerings. Consulting Services also offers other services in both the security and networking areas, including early assessment and design work, as well as emergency outbreak and network troubleshooting assistance. Our consulting services organization is organized around our product groups.

Education Services offer customers an extensive curriculum of computer network technology courses, including protocol analysis and troubleshooting, security, help-desk and network management tools. Education Services provides public classes and customized on-site training at customer locations.

The PrimeSupport program provides our customers on-line and telephone-based technical support in an effort to ensure that our products are installed and working properly. To meet customers’ varying needs, PrimeSupport offers a choice of the on-line KnowledgeCenter or the telephone-based Connect, Priority and Enterprise. All PrimeSupport programs include software updates and upgrades. PrimeSupport is available to all customers worldwide from various regional support centers.


	•	PrimeSupport KnowledgeCenter — Consists of a searchable, knowledge base of technical solutions and links to a variety of technical documents such as product FAQs and technical notes.

	•	PrimeSupport Connect — Provides toll-free telephone access to technical support during regular business hours and access to the online KnowledgeCenter.

	•	PrimeSupport Priority — Provides support with priority, unlimited, toll-free telephone access to technical support 24 hours a day, 7 days a week and access to the on-line KnowledgeCenter.

	•	PrimeSupport Enterprise — Offers proactive, personalized service and includes an assigned technical support engineer from our Enterprise support team, proactive support contact (telephone or email) with customer-defined frequency, election of five designated customer contacts and access to the on-line KnowledgeCenter.

In addition, we also offer our consumer users technical support services made available at our McAfee.com website on both a free and fee based basis, depending on the support level required.

Network Associates Labs, or NAI Labs, is our research and development organization dedicated to advanced network and host system intrusion protection and security technology. NAI Labs currently conducts research in the areas of: host intrusion protection; network intrusion protection; wireless intrusion protection; malicious code defense; security policy and management; high-performance assurance and forensics; and threats, attacks, vulnerabilities and architectures. NAI Labs has ongoing projects funded through the U.S. Defense Advanced Research Projects Agency, the U.S. Intelligence Community Advanced Research & Development Activity, Air Force, Navy, Army, NSA and other Department of Defense and U.S. government agencies. NAI Labs focuses on exploiting government research to advance the capabilities of our product line offerings.

From time to time, we enter into strategic alliances with third parties to serve as a catalyst for our future growth. These relationships may include joint technology development and integration, research cooperation, co-marketing activities and sell-through arrangements. For example, we have an alliance with America Online (“AOL”) under which, among other things, we offer our on-line PC anti-virus services to AOL members as a co-branded premium service, and provide our host-based email scanning services and personal firewall services

We typically license our products to corporate and government customers on a subscription basis for a period of two years or on a perpetual basis. As the software licenses or maintenance contracts near expiration, we contact customers to renew their licenses or maintenance contracts, as applicable. Typically, our maintenance contracts are sold on an annual basis.

Our licensing model also creates the opportunity for recurring revenue for us through the renewal of existing licenses. By offering two-year licenses, as opposed to traditional perpetual licenses, we are also able to meet a lower initial cost threshold for customers with annual budgetary constraints. The renewal process also provides an opportunity to cross-sell new products and product lines to existing customers.

We also provide single user and corporate user licenses for our products under traditional perpetual licenses with product updates, upgrades and support available to customers under separate maintenance contracts. As compared to subscription licenses, sales of perpetual licenses may result in significantly higher up-front revenue and lower recurring and future revenues. We typically sell perpetual licenses in connection with sales of our hardware-based products in which software is bundled with the hardware platform.

Magic Service DeskSolutions sales are primarily on a perpetual license basis while allowing customers to purchase annual maintenance renewals.

For our on-line subscription services, customers essentially “rent” the use of our software. Because our on-line subscription services are “version-less,” or self-updating, customers using these services are assured of using the most recent version of the software application, eliminating the need to purchase product updates or upgrades. Our on-line subscription consumer products and services can be found at our McAfee.com web site, through which consumers using their Internet browser detect and eliminate viruses on their PCs, repair their PCs from damage caused by viruses, optimize their hard drives and update their PCs’ virus protection system with current software patches and upgrades. Our McAfee.com web site also offers customers access to McAfee Personal Firewall Plus, McAfee SpamKiller and McAfee Internet Privacy Service, as well as combinations of these services through suites.

Similarly, our corporate on-line subscription products and services, or our ASaP offerings, provide corporate customers the most up-to-date anti-virus software. Our ASaP offerings include VirusScan ASaP, which provides anti-virus protection to desktops and file servers, VirusScreen ASaP, which screens e-mails to detect and quarantine viruses and infected attachments, and Desktop Firewall AsaP, which blocks unauthorized network access and stops known network threats.

We also make our on-line subscription products and services available over the Internet in what we refer to as a managed environment. Unlike our on-line subscription service solutions, these managed service providers, or MSP, solutions are customized, monitored and updated by networking professionals for a specific customer. We also allow intermediaries, such as Internet Service Providers, to sell and host our products and services in a managed environment.

Except as described below, there have been no material changes to our critical accounting policies and estimates as disclosed in our report on Form 10-K for the year ended December 31, 2002.

Effective January 1, 2003, we changed our method for recognizing commission expenses to sales personnel. Prior to January 1, 2003, our policy was to expense the commissions as incurred. However, we believe that expensing commissions as incurred does not provide a fair representation of the income (loss) from operations when part or all of the revenue related to these sales transactions is deferred and recognized

over time. Commission expense directly related to sales transactions is now deferred and recognized ratably over the same period as the related revenue is recognized and recorded. As required by generally accepted accounting principles, the cumulative effect of the change in accounting principle effective January 1, 2003 is a one-time credit of $13.9 million ($11.1 million after tax) in the first quarter of 2003.

This Management’s Discussion and Analysis of Financial Condition and Results of Operations gives effect to the restatement of our consolidated financial statements for 1998 through 2001 and the quarters ended March 31, June 30, and September 30, 2002. Due to the impact of the restatement, the results discussed herein for the three and nine months ended September 30, 2002, differ from those previously reported in our Form 10-Q. We do not intend to restate our previous Form 10-Qs, and those documents should not be relied upon.

The results set forth below should be read in conjunction with (i) the unaudited condensed consolidated financial statements included in this Form 10-Q and (ii) the consolidated financial statements for 1998 through 2002 and related notes contained in Amendment No. 2 to our 2000 Form 10-K (1998 through 2000) and our 2002 Form 10-K (2000 through 2002).

Among others, the more significant categories of restatement adjustments were recorded:


	•	to properly reflect sales to our distributors and resellers on the sell-through basis for 1998 through 2000, which is how we have accounted for these sales since 2001; and

	•	to adjust our recognition of revenue under SOP 97-2 with respect to multi-element licensing arrangements in 1998 through 2000.

We have determined that, excluding the effect of currency-related adjustments, the aggregate amount of net revenue was not reduced as a result of our change to the sell-through revenue recognition method for years prior to 2001 or adjustments related to multi-element licensing arrangements in 1998 through 2000. These adjustments had the effect of deferring revenue from earlier periods to be recognized in later periods, with amounts deferred in connection with our multi-element licensing arrangements generally being recognized in later periods as service and support revenue. In the aggregate, for the three months ended September 30, 2003 and 2002, the restatement adjustments had the effect of increasing net revenues by $0.6 million and $22.2 million, respectively, and decreasing expenses by $0 million and $2.8 million, respectively. In the aggregate, for the nine months ended September 30, 2003 and 2002, the restatement adjustments had the effect of increasing net revenues by $5.5 million and $87.7 million, respectively, and decreasing expenses by $13.6 million and $5.8 million, respectively.

The following table sets forth, for the periods indicated, the percentage of net revenue represented by certain items in our Condensed Consolidated Statements of Operations.

Net Revenue. Net revenue decreased 11% to $226.9 million from $254.4 million in the three months ended September 30, 2003 and 2002, respectively. Net revenue decreased 14% to $663.6 million from $773.5 million in the nine months ended September 30, 2003 and 2002, respectively. The decline results primarily from continued reductions in corporate capital spending. Many of our customers and potential customers have: (i) delayed initiating the purchasing process; (ii) increased the evaluation time to complete a purchase or postponed, sometimes indefinitely, full IT deployments; and/or (iii) reduced their capital expenditure budgets, thereby restricting their software/services purchases to those believed by them to be necessary to satisfy an immediate need.

The following table sets forth, for the periods indicated, our product revenue and services and support revenue as a percent of net revenue.

The following table sets forth for the periods indicated each major category of our product revenue as a percent of product revenue.

Product revenue includes revenue from software licenses, hardware, retail products and royalties. Product revenue decreased 25% to $120.4 million from $160.1 million in the three months ended September 30, 2003 and 2002, respectively and decreased 22% to $366.9 million from $468.5 million in the nine months ended September 30, 2003 and 2002, respectively. The decrease in product revenue is attributable to decreases in the size of transactions as customers continued to limit expenditures or postpone full deployments. The decrease is also due to the deferral of an increasing share of perpetual and subscription license sales to ongoing product and customer support, which is recognized as maintenance revenue ratably over the service period, including as a result of our introduction of our perpetual “plus” licensing arrangements, described below. Deferred revenue has increased 32% to $397.2 million from $301.5 million at September 30, 2003 and 2002, respectively.

Our customers license our software on a perpetual or subscription basis depending on their preference. The software component of most of our Sniffer and Magic products and a large number of our McAfee anti-virus software products targeted at enterprises are licensed on a perpetual basis. We continuously monitor our sales activities to ensure we have an appropriate mix of subscription and perpetual license revenues. We may experience higher overall revenue in the near-term but lower future software license revenue due to increased levels of perpetual licenses. Because perpetual licenses typically cost our customers more up-front than term licenses, sales of perpetual licenses may result in higher up-front revenue and lower recurring and future revenues.

We recently introduced in Europe and Asia our perpetual “plus” licensing arrangements. Under these arrangements, we provide a perpetual license coupled with additional support, with a higher percentage of the contract value allocated to support revenues, which are deferred and recognized over the service period rather than being recognized immediately into earnings. We expect these arrangements will result in an increased amount of revenue being deferred to future periods.

The following table sets forth, for the periods indicated, each major category of our services and support as a percent of services and support revenue:

Services and support revenues include revenues from software support and maintenance contracts, consulting, training and on-line subscriptions. Services and support revenues increased 13% to $106.5 million from $94.4 million in the three months ended September 30, 2003 and 2002, respectively, and decreased 3% to $296.7 million from $305.0 million in the nine months ended September 30, 2003 and 2002, respectively. The decrease in services and support revenues for the nine months ended September 30, 2003 is attributable to reduced licensing activity and a decline in our consulting and training revenues. As our customers reduce budgets for information technology products and services, consulting and training services are typically the first discretionary spending items that are reduced or eliminated. This decline for the period was offset by a $11.8 million increase in on-line subscription revenues generated from our McAfee.com consumer site.

Our future profitability and rate of growth, if any, will be directly affected by increased price competition and an increasingly higher revenue base from which to grow. Our growth rate and net revenue depend significantly on renewals of existing orders, as well as our ability to respond successfully to the pace of technological change and expand our customer base. If our renewal rate or our pace of new customer acquisition slows, our net revenues and operating results would be adversely affected.

International revenue, as a percentage of net revenue, accounted for approximately 33% and 39% of net revenue for the three months ended September 30, 2003 and 2002, respectively and approximately 36% and 39% of net revenue for the nine months ended September 30, 2003 and 2002, respectively. The portion of our net revenue attributable to international operations has been impacted by our introduction of perpetual “plus” licenses in Europe and Asia, due to a higher percentage of contract values allocated to support revenues which are deferred and recognized ratably over the service period.

We have announced our intentions to increase our international revenues. Risks inherent in international revenue include the impact of longer payment cycles, greater difficulty in accounts receivable collection, unexpected changes in regulatory requirements, seasonality due to the slowdown in European business activity during the third quarter, risks associated with currency fluctuations and hedging, tariffs and other trade barriers and difficulties staffing and managing international operations. Poor economic conditions in Asia, particularly Japan and Latin America have hurt our business and may impact our ability to expand international revenue. These factors may have a material adverse effect on our future international revenue.

Cost of Net Revenue. Cost of net revenue decreased 6% to $37.9 million from $40.3 million in the three months ended September 30, 2003 and 2002, respectively. As a percentage of net revenue, cost of net revenue increased to 17% from 16% for the three months ended September 30, 2003 and 2002, respectively. Cost of net revenue decreased 14% to $107.7 million from $124.6 million in the nine months ended September 30, 2003 and 2002, respectively. As a percentage of net revenue, cost of net revenue remained at 16% for the nine

months ended September 30, 2003 and 2002, respectively. Period over period compared to the prior year, cost of net revenue in absolute terms generally decreased due to lower cost of computer platforms and other hardware components and the favorable impact of cost control measures, offset by an increase in the amortization of purchased technology. At the end of 2002, we began using a more competitive contract manufacturer, which utilizes a greater number of standardized computer platforms and hardware components, for the manufacture of our hardware-based products.

Our cost of product revenue consists primarily of the cost of media, manuals and packaging for products distributed through traditional channels; royalties and, with respect to hardware-based products, computer platforms and other hardware components. Cost of product revenue decreased 8% to $22.5 million from $24.4 million for the three months ended September 30, 2003 and 2002, respectively. As a percentage of net product revenue, cost of product revenue increased to 19% in the three months ended September 30, 2003 from 15% for the three months ended September 30, 2002. Cost of product revenue decreased 20% to $61.5 million from $77.3 million for the nine months ended September 30, 2003 and 2002, respectively. As a percentage of net product revenue, cost of product revenue increased to 17% from 16% in the nine months ended September 30, 2003 and 2002, respectively. The decrease in the cost of product revenue in absolute terms relates primarily to a decrease in the cost of computer platforms and other hardware components and as compared to the comparable period in 2002 and lower product sales, offset by increased amortization of purchased technology.

Cost of services and support revenue consists principally of salaries and benefits related to employees providing customer support and consulting services. The cost of services and support revenue decreased 21% to $12.0 million from $15.2 million in the three months ended September 30, 2003 and 2002, respectively. The decrease in the cost of services and support revenue was due to a reduction in costs of providing expert services due to a decrease in expert consulting and training services revenue and employment of cost control measures. Cost of services and support revenue as a percentage of net services and support revenue decreased to 11% from 16% in the three months ended September 30, 2003 and 2002, respectively. The cost of services and support revenue decreased 16% to $38.2 million from $45.4 million in the nine months ended September 30, 2003 and 2002, respectively. Cost of services and support revenue as a percentage of net services and support revenue decreased to 13% from 15% in the nine months ended September 30, 2003 and 2002, respectively. For the nine months ended September 30, 2003, the decrease in cost of services and support revenue as a percentage of service and support revenue reflects the 3% decrease in services and support revenue.

We expect that the cost of service revenue will fluctuate in future periods. Cost of service revenue will vary primarily based on our levels of customer support and consulting and training activities. We expect that the cost of support revenue will increase in absolute dollars with increases in McAfee consumer sales and increased customer support obligations related to our perpetual “plus” license arrangements.

The amortization of purchased technology is also included as a component of the cost of net revenue. Purchased technology results from business acquisitions made by us. We amortize the purchased technology intangible asset into the cost of net revenue over the estimated useful lives, usually, five to six years. We amortized $3.4 million and $0.7 million of purchased technology into cost of net revenue for the three months ended September 30, 2003 and 2002, respectively. We amortized $8.0 million and $2.0 million of purchased technology into cost of net revenue for the nine months ended September 30, 2003 and 2002, respectively. The increase in amortization of $2.7 million and $6.0 million for the three and nine month periods ended September 30 2003, respectively, is due to the purchases of (i) BySupport, Traxess, Deersoft and the minority interest of McAfee.com in the last half of 2002 and (ii) IntruVert and Entercept in the second quarter of 2003.

Our management believes that the disclosure and discussion of operating costs and expenses excluding stock-based compensation provides investors a meaningful basis of evaluating our underlying cost and expense levels. The size and amount of our stock-based compensation charges has varied, and in the future will vary,

The following sets forth for the periods indicated, our operating expenses, including the effects of stock-based compensation (in thousands):

The following sets forth for the periods indicated, our operating expenses, excluding the effects of stock-based compensation (in thousands):


(1)	Excludes stock-based compensation charges of $2,202 and $1,351 for the three months ended September 30, 2003 and 2002, respectively, and $3,520 and $236 for the nine months ended September 30, 2003 and 2002, respectively.

(2)	Excludes stock-based compensation charges (credits) of $2,795 and $903 for the three months ended September 30, 2003 and 2002, respectively, and $3,209 and $(234) for the nine months ended September 30, 2003 and 2002, respectively.

(3)	Excludes stock-based compensation charges of $839 and $9,456 for the three months ended September 30, 2003 and 2002, respectively, and $2,033 and $7,195 for the nine months ended September 30, 2003 and 2002, respectively.

Research and Development. Research and development expenses consist primarily of salary, benefits, and contractors’ fees for our development and technical support staff, and other costs associated with the enhancements of existing products and services and development of new products and services. Excluding the effects of stock-based compensation charges of approximately $2.2 million and $1.4 million for the three months ended September 30, 2003 and 2002, respectively, research and development expenses increased 22% to $44.5 million from $36.5 million for the three months ended September 30, 2003 and 2002, respectively. Excluding the effects of stock-based compensation charges of approximately $3.5 million and $0.2 million for the nine months ended September 30, 2003 and 2002, respectively, research and development expenses increased 27% to $134.6 million from $105.6 million for the nine months ended September 30, 2003 and 2002, respectively. The increase in research and development expenses in the three and nine month periods ended September 30, 2003 over the same periods in 2002 is primarily attributable to: an increase in headcount primarily in our new Bangalore, India facility resulting in an increase of $1.0 million and $9.0 million, respectively; ongoing research and development costs associated with our recent acquisitions of Traxess, Deersoft, IntruVert and Entercept of $4.6 million and $8.4 million, respectively; and increased allocated infrastructure costs, and general increases in our research and development efforts of $3.0 million and $6.0 million, respectively.

As a percentage of net revenue, research and development expenses were 20% and 15% for the three months ended September 30, 2003 and 2002, respectively. Excluding stock-based compensation charges, as a percentage of net revenue, research and development expenses were 20% and 14% for the three months ended September 30, 2003 and 2002, respectively. This increase in research and development expenses as a percentage of net revenue is attributable to an increase in absolute dollar expenses as well as a decrease in overall revenue from the three and nine months ended September 30, 2003 and 2002, respectively. As a percentage of net revenue, research and development expenses were 21% and 14% for the nine months ended September 30, 2003 and 2002, respectively. Excluding stock-based compensation charges, as a percentage of net revenue, research and development expenses were 20% and 14% for the nine months ended September 30, 2003 and 2002, respectively. We believe that continued investment in product and development is critical to attaining our strategic objectives and, as a result, expect product development expenses to increase in future periods. We anticipate research and development expenses to increase in absolute dollars, but will continue to fluctuate as a percent of net revenue.

Marketing and Sales. Marketing and sales expenses consist primarily of salary, commissions and benefits for marketing and sales personnel and costs associated with advertising and promotions. Excluding the effects of stock-based compensation charges of $2.8 million and $0.9 million for the three months ended September 30, 2003 and 2002, respectively, marketing and sales expenses decreased 9% to $88.6 million from $97.8 million for the three months ended September 30, 2003 and 2002, respectively. Excluding the effects of stock-based compensation charges (credits) of $3.2 million and $(0.2) million for the nine months ended September 30, 2003 and 2002, respectively, marketing and sales expenses decreased 14% to $263.9 million from $308.2 million. The decrease in marketing and sales expenses in the three and nine month periods ended September 30, 2003, over the same three and nine month periods in 2002 is due primarily to a reduction of 150 sales personnel. Also, beginning in 2003, we defer and recognize commissions expense ratably over the same period as related revenue. This change caused a decrease in commissions expense, included in marketing and sales expense of $1.4 million and $2.3 million for the three and nine months ended September 30, 2003. Previously, we expensed sales commissions as incurred.

As a percentage of net revenue, marketing and sales expenses were 40% and 39% for the three months ended September 30, 2003 and 2002, respectively. Excluding stock-based compensation charges, as a percentage of net revenue, marketing and sales expenses were 39% and 38% for the three months ended September 30, 2003 and 2002, respectively. As a percentage of net revenue, marketing and sales expenses were 40% for the nine months ended September 30, 2003 and 2002. Excluding stock-based compensation charges (credits), as a percentage of net revenue, marketing and sales expenses were 40% for the nine months ended September 30, 2003 and 2002. We anticipate marketing and sales expenses to increase in absolute dollars, but will continue to fluctuate as a percent of net revenue.

General and Administrative. General and administrative expenses consist primarily of salary and benefit costs for executive and administrative personnel, professional services and other general corporate activities. Excluding the effects of stock-based compensation charges of $0.8 million and $9.5 million for the three months ended September 30, 2003 and 2002, respectively, general and administrative expenses increased 42% to $37.0 million from $26.0 million for the three months ended September 30, 2003 and 2002, respectively. Excluding the effects of stock-based compensation charges of $2.0 million and $7.2 million for the nine months ended September 30, 2003 and 2002, respectively, general and administrative expenses increased 27% to $95.4 million from $75.0 million for the nine months ended September 30, 2003 and 2002, respectively. The increase in general and administrative expenses in the three and nine month periods ended September 30, 2003 over the same three and nine month periods in 2002 is primarily attributable to increased spending related to information technology infrastructure reengineering, legal fees, relocation costs for certain personnel, retention bonuses and severance costs related to recent acquisitions of $2.6 million, and expenses associated with our restatement efforts totaling $8.3 million for the nine months ended September 30, 2003.

As a percentage of net revenue, general and administrative expenses were 17% and 14% for the three months ended September 30, 2003 and 2002, respectively. Excluding stock-based compensation charges, as a percentage of net revenue, general and administrative expenses were 16% and 10% for the three months ended September 30, 2003 and 2002, respectively. As a percentage of net revenue, general and administrative expenses were 14% and 10% for the nine months ended September 30, 2003 and 2002, respectively. Excluding stock-based compensation charges, as a percentage of net revenue, general and administrative expenses were 14% and 10% for the nine months ended September 30, 2003 and 2002, respectively. We anticipate general and administrative expenses to remain flat as we continue to employ cost control measures.

Recovery of Doubtful Accounts, Net. Provision for doubtful accounts consists of our estimates for the uncollectibility of receivables, net of recoveries of amounts previously written off. For the three and nine months ended September 30, 2003, the changes in our doubtful accounts resulted in a net credit of approximately $0.1 million and $0.8 million, respectively, compared to a net credit of approximately $0.8 million and $1.1 million, respectively, for the three and nine months ended September 30, 2002.

Amortization of Intangibles. We recorded $3.6 million and $2.4 million of amortization related to intangibles for the three months ended September 30, 2003 and 2002, respectively and $12.4 million and $6.5 million for the nine months ended September 30, 2003 and 2002, respectively. The increase in amortization expenses in the three and nine month periods ended September 30, 2003 over the same three and nine month periods in 2002 is primarily attributable to the acquisition of the minority interest in McAfee.com in the third quarter of 2002, the purchase of BySupport, BySecure, Deersoft and Traxess in last half of 2002 and the acquisitions of IntruVert and Entercept in the second quarter of 2003.

Restructuring Charge. In January 2003, as part of a restructuring effort to gain operational efficiencies, we consolidated operations formerly housed in three leased facilities in the Dallas, Texas area into our newly constructed 170,000 square-foot regional headquarters facility in Plano, Texas. The new facility houses approximately 1,000 employees working in finance, legal, information technology, and the customer support and telesales groups servicing the McAfee System Protection Solutions and McAfee Network Protection Solutions businesses. As part of the consolidation of activities into the Plano facility, we relocated approximately 170 employees from our Santa Clara, California headquarters site. As a result of this consolidation, in March 2003 we recorded a restructuring charge of $15.8 million which consisted of a non-cash charge of $2.1 million related to asset disposals and discontinued use of certain leasehold improvements, furniture and equipment; non-cash write off of $(1.9) million of deferred rent liability and a $15.6 million accrual for estimated lease-related costs associated with vacated facilities in Santa Clara, California. The remaining costs associated with permanently vacating the Santa Clara facilities are primarily comprised of the present value of remaining lease obligations, net of estimated sublease income, along with costs associated with subleasing the vacated facilities. The remaining costs associated with permanently vacating the facilities will generally be paid over the remaining lease term ending in 2013. The total restructuring charge and related cash outlay are based on management’s current estimates. Amounts to be paid, relative to the restructuring accrual, within 12 months ($1.9 million) have been included in accrued liabilities, while amounts to be paid

During the second and third quarters 2003, we recorded a restructuring charge of $6.8 million and $0.3 million, respectively which consisted of $6.6 million related to a headcount reduction of 210 employees and $0.6 million related to other expenses such as legal expenses incurred in international locations in conjunction with the headcount reduction. The affected employees were located in our domestic and international locations and were primarily in the sales, product development and customer support areas.

The following table sets forth our restructuring accrual established in 2003 (in thousands):

Our estimates of the excess facilities charge may vary significantly depending, in part, on factors, such as our success in negotiating with our lessor, the time periods required to locate and contract suitable subleases and the market rates at the time of such subleases, that may be out of our control. Adjustments to the facilities accrual will be made if further consolidations are required or if actual lease exit costs or sublease income differ from amounts currently expected.

As part of the plan to integrate certain activities of our PGP product group into our other product groups and to dispose of other product lines, we sold our Gauntlet business and discontinued other product lines during the first quarter of 2002. In connection with this process, a restructuring charge of approximately $1.1 million was recorded during the first quarter of 2002. The restructuring charge consists of costs of severance packages for 44 employees as well as related legal and outplacement services.

The following table sets forth our restructuring accrual established in February 2002 and the activity against the accrual during the nine months ended September 30, 2002 (in thousands):

In-Process Research and Development. The ongoing project at IntruVert at the time of the purchase included the development of the Infinity model of IntruShield sensor. Infinity is a lower end model of the IntruShield sensor product family that is targeted towards remote offices and branch offices of large enterprises as well as small/medium businesses. At the date we acquired IntruVert, we estimated that, on average, 86% of the development effort had been completed and that the remaining 14% of the development effort would take approximately 2 1/2 months to complete and would cost $0.3 million. The efforts required to complete the development of these projects principally relate to finalization of coding, and completion of prototyping, verification, and testing activities required to establish that products associated with the technologies can be successfully introduced. The value of the in-process technologies was determined by estimating the projected net cash flows related to products, including costs to complete the development of the technologies or products, and the future net revenues that may be earned from the products, excluding the value attributed to integration with our products or that may have been achieved due to efficiencies resulting from the combined sales force or the use of our more effective distribution channel. These cash flows were

discounted back to their net present value using a discount rate of 20% (which represents a premium of approximately 4% over our weighted average cost of capital) and excluding the value attributable to the use of the in-process technologies in future products.

The ongoing projects at Entercept at the time of the purchase comprised a Linux version of their current product. At the date we acquired Entercept, we estimated that, on average, 31% of the development effort had been completed and that the remaining 69% of the development effort would take approximately eight months to complete and would cost $0.3 million. The efforts required to complete the development of these projects principally relate to additional design efforts, finalization of coding, and completion of prototyping, verification, and testing activities required to establish that products associated with the technologies can be successfully introduced. The value of the in-process technologies was determined by estimating the projected net cash flows related to products, including costs to complete the development of the technologies or products, and the future net revenues that may be earned from the products, excluding the value attributed to integration with our products or that may have been achieved due to efficiencies resulting from the combined sales force or the use of the our more effective distribution channel. These cash flows were discounted back to their net present value using a discount rate of 35% (which represents a premium of approximately 19% over our weighted average cost of capital) and excluding the value attributable to the use of the in-process technologies in future products.

Interest and Other Income. Interest and other income decreased 52% to $4.4 million from $9.1 million for the three months ended September 30, 2003 and 2002, respectively, and decreased 36% to $15.0 million from $23.4 million for the nine months ended September 30, 2003 and 2002, respectively. The decrease is due to lower overall interest yields on cash and investments and decrease in overall cash and investment balances due to acquisitions and the repurchase of our zero coupon convertible debentures.

Interest Expense. Interest expense decreased 83% to $1.2 million from $7.0 million for the three months ended September 30, 2003 and 2002, respectively, and decreased 72% to $6.4 million from $22.6 million for the nine months ended September 30, 2003 and 2002, respectively. Interest expense decreased primarily due to the repurchases of our zero coupon convertible subordinated debentures which occurred principally in May and August 2002 and in February 2003 with aggregate face amounts at maturity of $100 million and $358 million, respectively. The interest expense includes a net gain related to the change of fair value of the interest rate swap of $1.7 million and $3.8 million for the three and nine months ended September 30, 2003, respectively, and a net expense of $0.8 million for the three and nine months ended September 30, 2002.

Loss on Repurchase of Zero Coupon Convertible Debentures. In the nine months ended September 30, 2003, we recognized a $2.7 million loss on the repurchase of the balance of our remaining zero coupon convertible debentures. In the nine months ended September 30, 2003, we redeemed debentures having an aggregate face amount at maturity of approximately $359 million, for approximately $177.3 million, respectively. In the nine months ended September 30, 2003, the aggregate accreted value of the redeemed debentures was approximately $174.7 million, resulting in a $2.7 million loss on repurchase. During the nine months ended September 30, 2002, as a result of a limited number of private transactions, we redeemed debentures, having an aggregate face amount at maturity of $40.0 million, at a net price of $18.8 million. The aggregate accreted value of the redeemed debentures was slightly less than $18.8 million, which resulted in a $31,000 loss on repurchase.

Gain (Loss) on Sale of Assets and Products Lines. We recognized a $0.9 million loss on disposal of furniture and equipment and a $10.0 million gain on the sale of our PGP Gauntlet business and related technology and other investments in the nine months ending September 30, 2003 and 2002, respectively.

Provision for (Benefit from) Income Taxes. Our consolidated provision for income taxes for the three months and nine months ended September 30, 2003 was approximately $2.5 million and $3.0 million, respectively, reflecting an effective tax rate of rate of 20% and 18%, respectively. The effective tax rate differs from the statutory rate primarily due to the impact of research and experimentation tax credits, utilization of foreign tax credit carryovers and lower effective rates in some overseas jurisdictions. Our future effective tax rates could be adversely affected if earnings are lower than anticipated in countries where we have lower statutory rates or by unfavorable changes in tax laws and regulations.

Cumulative Effect of Change in Accounting Principle. In the three months ended March 31, 2003, we recorded a one-time credit of $13.9 million ($11.1 million after taxes) in connection with a change in the way we account for sales commission to sales personnel. Prior to January 1, 2003, we expensed sales commissions as incurred. Now commission expense directly related to sales transactions is deferred and recognized ratably over the same period as the related revenue is recognized and recorded.

We recorded stock-based compensation charges of $5.8 million and $11.7 million in the three months ended September 30, 2003 and 2002, respectively, and $8.8 million and $7.2 million in the nine months ended September 30, 2003 and 2002, respectively. As more fully described in Note 4 to our condensed consolidated financial statements, these charges (credits) are made up of the following (in thousands):

Exchange of McAfee.com options. On September 13, 2002, we acquired the minority interest in McAfee.com. In exchange for each McAfee.com option, holders received options for 0.675 of a share of our common stock plus $8.00 in cash, which will be paid to the option holder only upon exercise of the option and without interest. McAfee.com options to purchase 4.1 million shares were converted into options to purchase 2.8 million shares of our common stock. Because McAfee.com was our consolidated subsidiary and these options were repriced in conjunction with the acquisition of the minority interest, these options were accounted for under the variable method of accounting, which requires that a compensation charge be remeasured at the end of every reporting period using fair market value.

During the three and nine months ended September 30, 2003, we recorded a charge of approximately $1.2 million and $2.3 million, respectively, and during the three and nine months ended September 30, 2002, we recorded a charge of approximately $11.2 million related to exchanged options subject to variable accounting. This stock-based compensation charge, related to exchanged options subject to variable accounting, was based on our closing share price of $13.76 and $10.63 on September 30, 2003 and 2002, respectively. As of September 30, 2003, we had approximately 1.0 million outstanding options subject to variable accounting.

New and existing executives. On January 3, 2001, we entered into an employment agreement with George Samenuk to become our president and chief executive officer. In accordance with the terms of the agreement, we issued 400,000 shares of restricted stock to Mr. Samenuk. The price of the underlying shares is $0.01 per share. During the three and nine months ended September 30, 2003, we recorded approximately $0.2 million and $0.7 million, respectively, related to stock-based compensation associated with Mr. Samenuk’s 2001 restricted stock grant.

On January 15, 2002, our board of directors approved a grant of 50,000 shares of restricted stock to Mr. Samenuk. The price of the underlying shares is $0.01 per share. During both the three months ended September 30, 2003 and 2002, we recorded approximately $0.1 million, and during the nine months ended September 30, 2003 and 2002, we recorded approximately $0.3 million and $0.4 million, respectively, related to stock-based compensation associated with Mr. Samenuk’s 2002 restricted stock grant.

Former employees. In October 2002, we terminated the employment of four former McAfee.com executives. These executives held McAfee.com options, which were exchanged for options to acquire shares of our common stock. These options are subject to variable accounting as discussed above. Upon the executives’ termination, the options held by these individuals were modified in accordance with existing change in control agreements and became fully vested. After December 31, 2002, all remaining options were exercised within the first quarter of 2003. As a result, we recorded a final stock-based compensation charge of $1.1 million during the three months ended March 31, 2003.

Extended life of vested options held by terminated employees. In March 2003, we announced that the filing of our Form 10-K for 2002 would be postponed in order to restate prior financial results for 2000, 1999 and 1998. As a result, we suspended all exercises of stock options until the 2002 Form 10-K and all required quarterly reports on Form 10-Q were filed with the SEC, as these reports are incorporated by reference into the securities registration statements for each of the stock option plans. The period during which all stock option exercises are suspended is known as the blackout period. Due to the blackout period, we have extended the exercisability of any options that would otherwise terminate during the blackout period for a period of time equal to a specified period after termination of the blackout period. Accordingly, we have recorded a stock-based compensation charge on the date the options should have terminated based on the intrinsic value of the option on the modification date and the option price. During the three and nine months ended September 30, 2003, we recorded a stock-based compensation charge of approximately $1.5 million and $2.0 million for the extension of life of vested options held by terminated employees.

Repriced Options. During the three and nine months ended September 30, 2003, we did not incur a charge related to options subject to variable plan accounting. During the nine months ended September 30, 2002, we incurred negative charges of approximately $6.5 million, respectively, related to options subject to variable plan accounting. For the three and nine months ended September 30, 2003, our stock-based compensation charges related to options subject to variable plan accounting were based on a quarter-end per share price of our common stock of $13.76. For the three and nine months ended September 30, 2002, our stock-based compensation charges related to options subject to variable plan accounting were based on a quarter-end per share price of our common stock of $10.63. As of September 30, 2003 we had options to purchase approximately 0.8 million shares that were outstanding and subject to variable plan accounting.

Extended period of Employee Stock Purchase Plan. In March 2003, we announced that the filing of our Form 10-K for 2002 would be postponed in order to restate prior financial results for 2000, 1999 and 1998. As a result, effective April 9, 2003, we suspended all stock purchases until the 2002 Form 10-K and all required quarterly reports on Form 10-Q were filed with the SEC, as these reports are incorporated by reference into the securities registration statements for the 2002 Employee Stock Purchase Plan (“2002 Purchase Plan”). The period during which all stock purchases was suspended is known as the blackout period. Due to the blackout period, we extended the purchase period of the 2002 Purchase Plan that would otherwise had been purchased on July 31, 2003. Accordingly, we recorded a stock compensation charge at the period ended September 30, 2003. During the three and nine months ended September 30, 2003, we recorded a stock compensation charge of approximately $3.0 million.

We also incurred a stock-based compensation charge in connection with the initial issuance of the repriced options. This charge was calculated based on the difference between the exercise price of the new options and their market value on the date of acceptance by employees. No charges were incurred for the three and nine months ended September 30, 2003 and approximately $1.0 million was expensed during the nine months ended September 30, 2002.

Extended vesting term of options. During the three months ended September 30, 2002, we recorded a one-time stock-based compensation charge of approximately $0.2 million as a result of the modification of the terms of the options previously granted to certain employees.

Shares Purchased Outside Employee Stock Purchase Plan. On January 31, 2002, we experienced a shortfall in the number of shares available under the 1994 Employee Qualified Stock Purchase Plan to meet the requirements of the open purchase period. Although we reduced the number of shares available for purchase by plan participants by a pro rata amount, additional shares were required to be purchased outside of the plan. As a result, we recorded a one-time stock-based compensation charge of approximately $0.1 million in the three months ending March 31, 2002. The charge was based on the difference between the fair value of the shares purchased outside of the plan and the exercise price.

On May 14, 2003, we acquired 100% of the outstanding capital shares of IntruVert Networks, Inc., (“IntruVert”) a provider of network-based intrusion prevention solutions designed to proactively detect and stop system and network security attacks before they occur, for approximately $103.4 million in cash. We acquired IntruVert to enhance our intrusion detection product line. The results of operations of IntruVert have been included in our consolidated financial statements since the date of acquisition. Under the transaction, we recorded approximately $18.2 million for developed technology, $1.9 million for acquired product rights, including revenue related order backlog and contracts, $74.1 million for goodwill (none of which is deductible for tax purposes), $11.0 million for cash, $9.6 million for net deferred tax liabilities and $2.2 million for tangible assets, net of liabilities. We also recorded approximately $5.7 million for acquired in-process research and development which was fully expensed upon purchase because technological feasibility had not been established and there was no alternative use for the projects under development. The intangibles acquired in the acquisition, excluding goodwill, are being amortized over their estimated useful lives of two to five years. We also accrued approximately $0.3 million in duplicative site costs related to the IntruVert acquisition of which $0.1 million remains as an accrual as of September 30, 2003.

On April 30, 2003, we acquired 100% of the outstanding capital shares of Entercept Security Technologies, Inc. (“Entercept”), a provider of host-based intrusion prevention solutions designed to proactively detect and stop system and network security attacks before they occur, for approximately $125.7 million in cash. We acquired Entercept to enhance our intrusion detection product line. The results of operations of Entercept have been included in our consolidated financial statements since the date of acquisition. Under the transaction, we recorded approximately $21.7 million for developed technology, $2.8 million for acquired product rights, including revenue related order backlog and contracts, $101.0 million for goodwill (none of which is deductible for tax purposes), $0.7 million for net deferred tax assets, $3.7 million for tangible assets, $1.0 million for cash and $6.0 million in liabilities. We also recorded approximately $0.9 million for acquired in-process research and development which was fully expensed upon purchase because technological feasibility had not been established and there was no alternative use for the projects under development. The intangibles acquired in the acquisition, excluding goodwill, are being amortized over their estimated useful lives of two to six years. We also accrued approximately $2.8 million in duplicative sites costs of acquired facilities to be exited, of which $2.6 million remains as an accrual as of September 30, 2003.

In June 2001, the Financial Accounting Standards Board (“FASB”) issued Statement of Financial Accounting Standard (“SFAS”) No. 143 “Accounting for Asset Retirement Obligations” (“SFAS 143”). SFAS 143 addresses the financial accounting and reporting for obligations associated with the retirement of tangible long-lived assets and the associated asset retirement costs. SFAS 143 applies to legal obligations associated with the retirement of long-lived assets that result from the acquisition, construction, development and/or normal use of the assets, including lease restoration obligations. SFAS 143 requires that the fair value

of a liability for an asset retirement obligation be recognized in the period in which it is incurred if a reasonable estimate of the fair value can be made. The fair value of the liability is added to the carrying amount of the associated asset, and this additional carrying amount is expensed over the life of the asset. We adopted SFAS 143 effective January 1, 2003. The adoption of SFAS 143 did not have a material impact on our consolidated financial condition, results of operations or cash flows.

In May 2002, the FASB issued SFAS No. 145, “Rescission of SFAS Nos. 4, 44, and 64, Amendment of SFAS No. 13, and Technical Corrections” (“SFAS 145”). Among other things, SFAS 145 rescinds various pronouncements regarding early extinguishment of debt and allows extraordinary accounting treatment for early extinguishment only when the provisions of Accounting Principles Board Opinion (“APB”) No. 30, “Reporting the Results of Operations — Reporting the Effects of Disposal of a Segment of a Business, and Extraordinary, Unusual and Infrequently Occurring Events and Transactions” are met. SFAS 145 provisions regarding early extinguishment of debt are generally effective for fiscal years beginning after May 15, 2002. As a result of adopting this Standard, we reclassified the loss on retirement of our convertible debt as other expense and conformed prior periods with this presentation.

SFAS 146 supersedes the Emerging Issues Task Force (“EITF”) Issue No. 94-3 “Liability Recognition for Certain Employee Termination Benefits and Other Costs to Exit an Activity (Including Certain Costs Incurred in a Restructuring)” (“EITF 94-3”) and EITF Issue No. 88-10 “Costs Associated with Lease Modification or Termination” (“EITF 88-10”). SFAS 146 prohibits recognition of a liability based solely on an entity’s commitment to a plan to exit an activity. SFAS 146 requires that: (i) liabilities associated with exit and disposal activities be measured at fair value and changes in the fair value of the liability at each reporting period be measured using an interest allocation approach; (ii) one-time termination benefits be expensed at the date the entity notifies the employee, unless the employee must provide future service, in which case the benefits are expensed ratably over the future service period; (iii) liabilities to terminate a contract be recorded at fair value when the contract is terminated; (iv) liabilities related to an existing operating lease/ contract, unless terminated, be recorded at fair value, less estimated sublease income, and measured when the contract does not have any future economic benefit to the entity (i.e., the entity ceases to utilize the rights conveyed by the contract); and (v) all other costs related to an exit or disposal activity be expensed as incurred.

SFAS 146 is effective for exit or disposal activities initiated after December 31, 2002. We adopted SFAS 146 during the fourth quarter of 2002. Restructuring charges we recorded in the three and nine month periods ended September 30, 2003 have been recognized in accordance with SFAS 146. The adoption of SFAS 146 will not impact our restructuring obligations recognized in 2002 as these obligations must continue to be accounted for in accordance with EITF 94-3 and other applicable pre-existing guidance.

interim disclosure requirements are effective for interim periods beginning after December 15, 2002. We adopted the interim disclosure provisions of SFAS 148 in our financial reports beginning with the quarter ended March 31, 2003. As the adoption of this standard involves disclosures only, there was no material impact on our consolidated financial statements.

In April 2003, the FASB issued SFAS No. 149, “Amendment of Statement 133 on Derivative Instruments and Hedging Activities” (“SFAS 149”). SFAS 149 (i) clarifies under what circumstances a contract with an initial net investment meets the characteristics of a derivative discussed in SFAS 133; (ii) clarifies when a derivative contains a financing component; and (iii) amends the definition of an underlying to conform it to language in FIN 45. SFAS 149 is generally effective for contracts entered into or modified after June 30, 2003. We have adopted the provisions of SFAS 149 which did not have a material impact on our consolidated financial position, results of operations or cash flows.

We have adopted the required provisions of SFAS 150 which did not have a material impact on our consolidated financial position, results of operations or cash flows based on the types of financial instruments we currently have issued. We are assessing the impact of the deferral of the deferred classification and measurement provisions of SFAS 150.

In November 2002, the EITF reached a consensus on Issue No. 00-21, “Multiple Deliverable Revenue Arrangements” (“EITF 00-21”). EITF 00-21 addresses certain aspects of the accounting by a vendor for arrangements under which it will perform multiple revenue-generating activities. It also addresses when and how an arrangement involving multiple deliverables should be divided into separate units of accounting. The guidance in EITF 00-21 is effective for revenue arrangements entered into in fiscal periods beginning after June 15, 2003, with early application permitted. Companies may elect to report the change in accounting as a cumulative effect of a change in accounting principle in accordance with APB Opinion 20, “Accounting Changes” and SFAS 3, “Reporting Accounting Changes in Interim Financial Statements (an amendment of APB Opinion No. 28).” We have adopted the provisions of EITF 00-21 for transactions to which SOP 97-2 does not apply, such as sales of hardware without software and hosted applications. The adoption of EITF 00-21 did not have a significant impact on our consolidated financial position, results of operations or cash flows.

retroactive, prospective, or both and account for the policy accordingly. A policy has a retroactive provision if it covers a specific known claim(s) that was reportable before the policy’s effective date. The continued applicability of FASB Interpretation No. 39, “Offsetting of Amounts Related to Certain Contracts,” to the recording of liabilities and the related insurance recoverables is also addressed. Since FIN 39 does not allow for offsetting the insurance liability with the recoverable, regardless of whether the company is recording the insurance policy as prospective or retroactive, there will likely be a balance sheet gross-up for all covered losses. EITF 03-03 is applicable to all claims-made insurance arrangements entered into beginning in a company’s next reporting period following ratification, which is June 30, 2003 for us. We have adopted the provisions of EITF 03-03 which did not have a material impact on our consolidated financial position, results of operations or cash flows.

In November 2002, the FASB issued FASB Interpretation No. 45, “Guarantor’s Accounting and Disclosure Requirements for Guarantees, Including Indirect Guarantees of Indebtedness of Others” (“FIN 45”). FIN 45 requires that a liability (at fair value) be recorded in the guarantor’s balance sheet upon issuance of a guarantee or indemnification. In addition, FIN 45 requires disclosures about the guarantees and indemnifications that an entity has issued, including a reconciliation of changes in the entity’s product warranty liabilities. The initial recognition and initial measurement provisions of FIN 45 are applicable on a prospective basis to guarantees and indemnifications issued or modified after December 31, 2002, irrespective of the guarantor’s fiscal year-end. We have adopted FIN 45, which did not have a material impact on our consolidated financial position, results of operations or cash flows.

In January 2003, the FASB issued FASB Interpretation No. 46, “Consolidation of Variable Interest Entities, an Interpretation of ARB No. 51” (“FIN 46”). FIN 46 requires certain variable interest entities to be consolidated by the primary beneficiary of the entity if the equity investors in the entity do not have the characteristics of a controlling financial interest or do not have sufficient equity at risk for the entity to finance its activities without additional subordinated financial support from other parties. FIN 46 is effective immediately for all new variable interest entities created or acquired after January 31, 2003. The original effective date of FIN 46 was delayed to the first reporting period after December 15, 2003 (or December 31, 2003 for us) for any variable interest entities or potential variable interest entities created before February 1, 2003. We are continuing to study the impact of FIN 46 on our consolidated financial position, results of operations and cash flows.

At September 30, 2003, we had $354.6 million in cash and cash equivalents and $407.9 million in marketable securities, for a combined total of $762.5 million.

Net cash provided by operating activities was $156.9 million and $139.6 million in the nine months ended September 30, 2003 and 2002, respectively.

Net cash provided by operating activities in the nine months ended September 30, 2003 resulted primarily from net income before non-cash charges. Non-cash charges primarily include depreciation, amortization, interest expense on convertible notes, and restructuring charges, offset by the gain on sale of assets and product lines and marketable securities. Additional cash was generated from a decrease of $44.0 million in our accounts receivable balance and an increase of $55.0 million in deferred revenue, offset by a decrease of $25.8 million in accounts payable and accrued liabilities and an increase in our deferred taxes of $12.9 million during the nine months ended September 30, 2003.

Net cash provided by operating activities in the nine months ended September 30, 2002 resulted primarily from net income before non-cash charges. Non-cash charges primarily include depreciation, amortization and interest expense on convertible notes, offset by the gain on sale of assets and product lines and negative stock compensation charges. Additional cash was generated from a decrease of $24.7 million in

our accounts receivable balance and a decrease of $30.7 million in our deferred taxes and decrease of $16.1 million in prepaid expenses and other assets and an increase in our accounts payable and accrued liabilities of $23.0 million. This cash increase was offset by a decrease in deferred revenue of $79.3 million and increase in deferred taxes of $30.7 million during the nine months ended September 30, 2002.

Net cash used in investing activities was $334.0 million and $152.5 million in the nine months ended September 30, 2003 and 2002, respectively. In the nine months ended September 30, 2003, we acquired IntruVert and Entercept for a total of approximately $216.0 million, net of cash acquired, the activity in the portfolio of our investment in marketable securities had a net cash usage of $66.6 million, we purchased $50.2 million of property and equipment. In the nine months ended September 30, 2002, the activity in the portfolio of our investment in marketable securities had a net cash usage of $6.0 million. Additional cash was used by our purchases of property and equipment of $40.4 million, purchase of technology of $11.6 million and the remaining minority interest of McAfee.com for $81.4 million

Net cash provided by (used in) financing activities was $(156.8) million and $34.6 million in the nine months ended September 30, 2003 and 2002, respectively. In the nine months ended September 30, 2003, we repurchased Debentures with an aggregate face amount at maturity of $359.0 million for a net price of $177.3 million and we generated cash of $20.5 million through the issuance of common stock under our stock option plan and employee stock purchase plan. Net cash provided by financing activities in the nine months ended September 30, 2002 consisted of $100.8 million generated from the issuance of common stock under our stock option plan and employee stock purchase plan offset by $66.2 million of cash used in the repurchase of a portion of our zero coupon debentures.

During the nine months ended September 30, 2003, a significant portion of our cash inflows was generated by our operations. Because our operating results may fluctuate significantly, as a result of decrease in customer demand or decrease in the acceptance of our future products, our ability to generate positive cash flow from operations may be jeopardized.

We believe that our available cash and anticipated cash flows from operations will be sufficient to fund our working capital and capital expenditure requirements for at least the next twelve months.

On February 13, 1998, we issued zero coupon convertible subordinated debentures due 2018 (“Debentures”), which had an aggregate face amount at maturity of $885.5 million and generated net proceeds to us of approximately $337.6 million (after deducting fees and expenses). The initial price for the Debentures was $391.06 per $1,000 of principal amount at maturity. As of September 30, 2003, we have repurchased all Debentures.

During the nine months ended September 30, 2002, we repurchased Debentures, having an aggregate face amount at maturity of $40.0 million, at a price of $18.8 million, which was financed from our investment portfolio. In connection with the repurchase, we recognized a loss of approximately $31,000 calculated as the difference between the accreted value of the debt, net of unamortized issuance costs, and the cost of repurchase. In August 2002, we repurchased outstanding Debentures with an aggregate face amount of $100.0 million for approximately $47.4 million. In connection with the August 2002 repurchase, we recognized a gain of approximately $57,000. During the nine months ended September 30, 2003, we repurchased Debentures which had an aggregate face amount at maturity of $358.5 million for a net price of $177.3 million. In connection with this repurchase, we recognized a loss of approximately $2.7 million.

On August 17, 2001, we issued 5.25% convertible subordinated notes due 2006 (“Notes”) with an aggregate principal amount of $345.0 million. The issuance generated net proceeds to us of approximately $335.1 million (after deducting fees and expenses). The Notes mature on August 15, 2006, unless earlier redeemed by us at our option or converted at the holder’s option. Interest is payable semi-annually, in cash, in arrears on February 15 and August 15 of each year, commencing February 15, 2002. At the option of the holder, the Notes may be converted into our common stock at any time, unless previously redeemed, at a conversion price of $18.07 per share. At any time between August 20, 2004 and August 14, 2005, we may

redeem all or a portion of the Notes for cash at a redemption price of 101.3125% of the principal amount. After August 14, 2005, the redemption price is 100.0% of the principal amount. The Notes are unsecured and are subordinated to all of our existing and future Senior Indebtedness (as defined in the related Indenture).

Quantitative and qualitative disclosure about market risk is set forth at “Management’s Discussion and Analysis of Financial Condition and Results of Operations” under Item 2 of this form 10-Q. Our market risks at September 30, 2003, have not changed significantly from those discussed in Item 7A of our Form 10-K for the year ended December 31, 2002 filed with the Securities and Exchange Commission.

Investing in our common stock involves a high degree of risk. The risks described below are not the only ones facing our company. Additional risks not presently known to us or that we deem immaterial may also impair our business operations. Any of the following risks could materially adversely affect our business, operating results and financial condition and could result in a complete loss of your investment.

Our revenues and operating results have varied significantly in the past. We expect fluctuations in our operating results to continue. As a result, we may not sustain profitability. Also, we believe that period-to-period comparisons of our financial results should not be relied upon as an indicator of our future results. Our expenses are based in part on our expectations regarding future revenues and in the short term are relatively fixed. We may be unable to adjust our expenses in time to compensate for any unexpected revenue shortfall.

Operational factors that may cause our revenues, gross margins and operating results to fluctuate significantly from period to period, include, but are not limited to:


	•	volume, size, timing and contractual terms of new licenses and renewals of existing licenses;

	•	introduction of new products, product upgrades or updates by us or our competitors;

	•	the mix of products we sell and services we offer and whether (i) our products are sold directly by us or indirectly through distributors, resellers and others, (ii) the product is hardware or software based and (iii) in the case of software licenses, the licenses are time-based subscription licenses or perpetual licenses;

	•	costs or charges related to our acquisitions or dispositions, including our acquisition of the publicly held shares of McAfee.com in September 2002 and our recent acquisitions of Entercept Security Technologies and IntruVert Networks and the dispositions of our PGP and Gauntlet product lines in 2002;

	•	the components of our revenue that are deferred, including our on-line subscriptions and that portion of our perpetual and subscription software licenses attributable to support and maintenance; and

	•	stock-based compensation charges and other costs related to extraordinary events, including litigation, reductions in force, relocation of personnel and restatement of our consolidated financial statements, and factors that lead to substantial drops in estimated values of long-lived assets below their carrying value.

Our net revenue is typically lower in the first quarter when many businesses experience lower sales, flat in the summer months, particularly in the European market, and higher in the fourth quarter as customers

It Is Difficult for Us to Estimate Operating Results Prior to the End of a Quarter.

Because we do not maintain significant levels of backlog, product revenues in any quarter are dependent on contracts entered into or orders booked and shipped in that quarter. Historically, we have experienced a trend toward more product orders, and therefore, a higher percentage of revenue shipments, in the last month of a quarter. Some customers believe they can enhance their bargaining power by waiting until the end of a quarter to place their order.

We Face Risks Related to the Pending Formal Securities and Exchange Commission and Department of Justice Investigations and Our Accounting Restatements.

In the first quarter of 2002, the SEC commenced a “Formal Order of Private Investigation” into our accounting practices. In the first quarter of 2003, we became aware that the DOJ had commenced an investigation into our consolidated financial statements. In April and May 2002, we announced our intention to file, and in June 2002 we filed with the SEC, restated consolidated financial statements for fiscal 2000, 1999 and 1998 to correct certain discovered inaccuracies for these periods.

As a result of information obtained in connection with the ongoing SEC and DOJ investigations, in March 2003, we concluded we would restate our consolidated financial statements for 1998 through 2000 to, among other things, reflect revenue on sales to our distributors for 1998 through 2000 on a sell through basis (which is how we reported sales to distributors since the beginning of 2001). Although we filed these restated consolidated financial statements on October 31, 2003, the SEC and DOJ inquiries have resulted, and may continue to result in, a diversion of management’s attention and resources and may contribute to effect current and future stock price volatility.

The filing of our restated consolidated financial statements does not resolve the pending SEC inquiry into our accounting practices. We are engaged in ongoing discussions with, and continue to provide information to, the SEC regarding our consolidated financial statements for calendar year 2000 and prior periods. The resolution of the SEC inquiry into our prior accounting practices could require the filing of additional material restatements of our prior consolidated financial statements or require that we take other actions not presently contemplated, including actions resulting from the SEC’s inquiry into the nature and manner of our recent restatement.

We Are Subject to Intense Competition in the System and Network Protection Markets, and We Expect to Face Increased Competition in the Future.

The markets for our products are intensely competitive and we expect competition to increase. Some of our competitors have longer operating histories, greater name recognition, larger technical staffs, established relationships with hardware vendors and/or greater financial, technical and marketing resources.


	•	in the anti-virus product market, Symantec and Computer Associates. Trend Micro remains the strongest competitor in the Asian anti-virus market. Sophos, Fsecure, Panda, and Dr. Ahn’s are also showing growth in their respective markets. As a result of its GeCAD Software acquisition, at some point we may also compete directly against Microsoft in the consumer market;

	•	in the network fault identification and application performance management product market, Netscout and WildPackets, with other competitors including Agilent, Cisco Systems, Compuware Corporation, Concord Communications, Finisar, Fluke Networks, Network Instruments and Niksun;


	•	in the market for our other intrusion detection and protection products, Cisco Systems, Computer Associates, Internet Security Systems, Netscreen, Sourcefire, Symantec and TippingPoint Technologies; and

	•	in the service desk market, BMC/ Remedy, Computer Associates, FrontRange Solutions and Peregrine Systems.

Other competitors for our various products could include large technology companies. We also face competition from numerous smaller companies and shareware authors that may develop competing products.

Increasingly, our competitors are large vendors of hardware or operating system software, such as HP, IBM, Microsoft and Novell. These competitors are continuously developing or incorporating system and network protection functionality into their products. For example, through its acquisition of Okena, Cisco Systems may incorporate functionality that competes with our content filtering and anti-virus products. Similarly, following its acquisition of GeCAD Software, Microsoft indicated its plans to boost security of its Windows platform. The widespread inclusion of products that perform the same or similar functions as our products within computer hardware or other companies’ software products could reduce the perceived need for our products or render our products obsolete and unmarketable. Furthermore, even if these incorporated products are inferior or more limited than our products, customers may elect to accept the incorporated products rather than purchase our products. In addition, the software industry is currently undergoing consolidation as firms seek to offer more extensive suites and broader arrays of software products, as well as integrated software and hardware solutions. This consolidation may negatively impact our competitive position.

Following our IntruVert and Entercept acquisitions, we reorganized our products into our McAfee System Protection Solutions and McAfee Network Protection Solutions product groups. Our organizational structure is intended to better leverage the McAfee brand to position us as a provider of a complete set of system and network protection solutions differentiated by intrusion prevention technology. Risks related to our reorganization include:


	•	we may be unable to successfully expand our McAfee brand beyond our anti-virus products;

	•	our strategic positioning may result in our competing more directly with larger, more established competitors, such as Cisco Systems and Microsoft;

	•	many of our network and system protection products were recently acquired and the income potential for these products is unproven and the market for these products is volatile;

	•	our sales force requires additional specialized training to sell a number of our products; and

	•	there may be customer confusion around our strategy.

We may buy or make investments in complementary companies, products and technologies. In addition to our acquisition of the publicly traded shares of McAfee.com, in the last 12 months, we completed a number of strategic acquisitions, including Deersoft, Entercept, IntruVert and Traxess, and we acquired two of our resellers in Central and South America, BySupport and BySecure. Also, McAfee.com acquired certain software assets from Novasoft in 2002 prior to our acquisition of the minority interest in McAfee.com.

Integration of an acquired company or technology is a complex, time consuming and expensive process. The successful integration of an acquisition requires, among other things, that we:


	•	integrate and retain key management, sales, research and development and other personnel;


	•	integrate the acquired products into our product offerings both from an engineering and sales and marketing perspective;

	•	integrate and support preexisting supplier, distribution and customer relationships;

	•	coordinate research and development efforts; and

	•	consolidate duplicate facilities and functions.

The geographic distance between the companies, the complexity of the technologies and operations being integrated, and the disparate corporate cultures being combined may increase the difficulties of integrating an acquired company or technology. Management’s focus on the integration of operations may distract attention from our day-to-day business and may disrupt key research and development, marketing or sales efforts. In addition, it is common in the technology industry for aggressive competitors to attract customers and recruit key employees away from companies during the integration phase of an acquisition.

Products or technologies acquired by us may include so-called “open source” software. Open source software is typically licensed for use at no initial charge, but imposes on the user of the open source software certain requirements to license to others both the open source software as well as the software that relates to, or interacts with, the open source software. Our ability to commercialize products or technologies incorporating open source code or otherwise fully realize the anticipated benefits of any such acquisition may be restricted because, among other reasons:


	•	open source license terms may be ambiguous and may result in unanticipated obligations regarding our products;

	•	competitors will have improved access to information that may help them develop competitive products;

	•	open source software cannot be protected under trade secret law;

	•	it may be difficult for us to accurately determine the developers of the open source code and whether the acquired software infringes third party intellectual property rights; and

	•	open source software potentially increases customer support costs because licensees can modify the software and potentially introduce errors.

Our available cash and securities may be used to acquire or invest in companies or products, possibly resulting in significant acquisition-related charges to earnings and dilution to our stockholders. For example, in the 12-month period ended September 30, 2003, we used approximately $312.0 million of cash to make various acquisitions, including approximately $217.0 million in net cash used to acquire IntruVert and Entercept. Moreover, if we acquire a company, we may have to incur or assume that company’s liabilities, including liabilities that may not be fully known at the time of acquisition.

We Have Recently Experienced Significant Additions to Our Senior Management and Changes in Our Sales Organization.

Several members of our senior management were only added in the last year, and we may add new members to senior management. In July 2003, we reorganized our sales organization and, among other actions, we elevated Kevin Weiss to the newly created position of executive vice president of worldwide sales. Also, in September 2003, we named James Lewandowski executive vice president of North American sales and Donna Troy executive vice president of worldwide channels. Towards the end of 2002, William Kerrigan joined us as senior vice president of our McAfee consumer division, Gregory Jorgensen joined as our senior vice president of marketing and Raymond J. Smets joined as president of Sniffer Technologies. Changes in management and our sales organization may be disruptive to our business and may result in the departure of

Our success depends in large part on our ability to attract and retain, in addition to senior management personnel, technically qualified and highly-skilled sales, consulting, technical and marketing personnel. Competition for qualified individuals is intense. To attract and retain critical personnel, we believe that we must provide a competitive compensation package, including stock options. Increases in shares available for issuance under our stock option plans require stockholder approval. Institutional stockholders, or our stockholders generally, may not approve future increases.

Through our 2003 acquisitions, we hired a number of new employees. We also hired a significant number of new employees in 2002 and 2001, including a large number in Bangalore, India, in connection with the relocation of a significant portion of our research and development operations. We may continue to add new employees to fill positions vacated by departing employees and to expand our business. There may be reduced levels of productivity as recent additions or hires are trained and otherwise assimilate and adapt to our organization and culture. In addition, we may face difficulties in recruiting, hiring and training qualified employees for our Bangalore facility.

Other than executive management who have “at will” employment agreements, our employees are not typically subject to an employment agreement or non-competition agreement. We may be unsuccessful in retaining management or other critical personnel. It could be difficult, time consuming and expensive to replace any key management member or other critical personnel, particularly if the individual is highly skilled. Integrating new management and other key personnel also may be difficult and costly. The loss of management or other critical personnel may be disruptive to our business and might also result in our loss of unique skills and the departure of existing employees and/or customers.

For the first nine months of 2003 and for the years 2002, 2001, and 2000, net revenue from international sales based upon product destination represented approximately 36%, 37%, 35%, and 38%, respectively, of our net revenue. We intend to focus on international growth and expect international revenue to remain a significant percentage of our net revenue. Related risks include:


	•	longer payment cycles and greater difficulty in collecting accounts receivable;

	•	increased costs and management difficulties related to the building of our international sales and support organization;

	•	the acceptance of the reorganization of our international sales forces by regions;

	•	the ability to successfully localize software products for a significant number of international markets;

	•	uncertainties relative to regional economic circumstances, including the continued economic weakness throughout Asia and Latin America and pricing pressures associated with weak economic conditions in these regions;

	•	our ability to adapt to sales practices and customer requirements in different cultures;

	•	currency fluctuations and risks related to hedging strategies;

	•	political instability in both established and emerging markets;

	•	tariffs, trade barriers and export restrictions; and

	•	a high incidence of software piracy in some countries;

Additionally, our sales forces are organized by geographic region. This structure may lead to sales force competition for sales to multinational customers and may reduce our ability to effectively market our products to multinational customers.

We May Incur Significant Stock-Based Compensation Charges Related to Repriced Options, Assumed McAfee.com and IntruVert Options, and Compensation Expenses Related to the Entercept Retention Payments.

We may incur stock-based compensation charges related to (i) employee options repriced in April 1999 (“Repriced Options”), (ii) McAfee.com options we assumed in the acquisition of the publicly traded McAfee.com shares in September 2002 (“McAfee.com Options”) and (iii) unvested IntruVert options we assumed in May 2003 related to this acquisition (the “IntruVert Options”), and (iv) unvested IntruVert restricted stock we assumed in May 2003 related to this acquisition (the “IntruVert Restricted Stock”). The size of the charges related to the Repriced Options and McAfee.com Options could be significant depending on the movements in the market value of our common stock. As a result of Financial Accounting Standards Board Interpretation No. 44, effective July 1, 2000, Repriced Options and McAfee.com Options are subject to variable accounting treatment. The stock-based compensation charge (or credit) for the Repriced Options is determined by the excess of our closing stock price at the end of a reporting period over the fair value of our common stock on July 1, 2000, equivalent to $20.375. The stock-based compensation charge (or credit) for the McAfee Options is determined by the excess of our closing stock price over the exercise price of the option minus $11.85 payable upon exercise of the option. Remeasurement of the charge continues until the earlier of the date of exercise, forfeiture or cancellation without replacement. The resulting compensation charge (or credit) to earnings will be recorded over the remaining life of the options subject to variable accounting treatment.

For the nine months ended September 30, 2003, stock-based compensation charges of approximately $2.3 million were recorded for McAfee.com Options. No stock-based compensation charges were recorded for the Repriced Options. For the year ended December 31, 2002, stock-based compensation charges of approximately $16.1 million were recorded for the McAfee.com Options, and credits of approximately $5.5 million were recorded for the Repriced Options. During the remaining life of both the McAfee.com Options and Repriced Options we may record additional stock-based compensation charges or credits. We estimate that a $1 increase in our stock price at September 30, 2003 would increase our future stock compensation charge by approximately $0.5 million.

As part of the IntruVert acquisition, the Company cancelled all outstanding IntruVert restricted stock and outstanding stock options and agreed to make cash payments to former IntruVert employees contingent upon their continued employment with the Company, based on the same vesting terms of their restricted stock or stock option agreements. The payments to former IntruVert employees are recorded monthly as salary expense as the employees are currently providing services to the Company. Payments under the restricted stock plan are paid ratably over the vesting period from an escrow account and will total approximately $3.0 million from the purchase date through the fourth quarter of 2006. Payments under the stock option plan are being paid monthly through the Company’s payroll and will total approximately $4.1 million from the purchase date through the second quarter of 2007. Cash payments that were fully vested at the date of the acquisition were included in the purchase price. If a former IntruVert employee ceases employment with the Company, unvested payment amounts will be returned to the Company.

We have historically derived a majority of our net revenue from our flagship McAfee anti-virus software products and our Sniffer network fault identification and application performance management products. These products are expected to continue to account for a significant portion of our net revenues. Because of this revenue concentration, our business could be harmed by a decline in demand for, or in the prices of, these products as a result of, among other factors, any change in our pricing model, a maturation in the markets for these products or other risks described in this document. In recent periods, our Sniffer-based revenues have been adversely impacted by, among other things, customer budgetary constraints and a slowing in network infrastructure deployments. We expect this trend to continue for at least the near-term.

Weakening economic conditions, new product introductions and expansions of our business may increase the time necessary to sell our products and services and require us to spend more on our sales efforts. Our products and services may be considered to be capital purchases by our current or prospective customers. Capital purchases are often discretionary and, therefore, are canceled or delayed if the customer experiences a downturn in its business prospects or as a result of economic conditions in general.

We Face a Number of Risks Related to Our Product Sales Through Distributors.

We sell a significant amount of our products through intermediaries such as distributors. Our top ten distributors typically represent approximately 40% to 45% of our net revenue in any quarter. Our two largest distributors, Ingram Micro and Tech Data, together accounted for approximately 35% of net revenue in 2002 and the first nine months of 2003, respectively.

Our distributor agreements may be terminated by either party without cause. If one of our significant distributors terminates its distribution agreement, we could experience a significant interruption in the distribution of our products.

We recognize revenue on products sold by our distributors when distributors sell our products to their customers. To determine our business performance at any point in time or for any given period, we must timely and accurately gather sales information from our distributors’ information systems, at an increased cost to us. Our distributors’ information systems may be less accurate or reliable than our internal systems.

Our distributors may sell other vendors’ products that are complementary to, or compete with, our products. While we encourage our distributors to focus on our products through market and support programs, these distributors may give greater priority to products of other suppliers, including competitors.

Some of our distributors may experience financial difficulties, which could adversely impact our collection of accounts receivable. Our allowance for doubtful accounts was approximately $15.2 million at September 30, 2003, $6.6 million at December 31, 2002 and $8.4 million at December 31, 2001. We regularly review the collectibility and credit-worthiness of our distributors to determine an appropriate allowance for doubtful accounts. Our uncollectible accounts could exceed our current or future allowances.

We Face the Risk of Future Charges in the Event of Impairment and will Experience Significant Amortization Charges Related to Purchased Technology.

We adopted SFAS 142 beginning in 2002 and, as a result, we no longer amortize goodwill. However, we will continue to have significant amortization related to purchased technology, trademarks, patents and other intangibles. For the nine months ended September 30, 2003, the year ended December 31, 2002 and 2001, our amortization charge for purchased technology and other intangibles was approximately $20.3 million, $13.9 million and $12.9 million, respectively. In addition, we must evaluate our intangible assets, including goodwill and purchased technology, at least annually for impairment according to the guidance provided by SFAS 142. We completed the initial impairment review during the second quarter of 2002 and subsequently completed our annual impairment review during the fourth quarter of 2002. As a result of these reviews, the intangible assets were determined not to be impaired. If we determine that these items are impaired, we will be required to take a related non-recurring charge to earnings.

We Face Risks Related to the Recent Reorganization of Our Expert Services Organization.

Historically, our professional service organization was organized by product group. In October 2002, we announced the formation of our Expert Services organization. This organization will be located in each of our geographical regions. The Expert Services organization combines the professional service teams from our network protection and system protection product groups to serve as our professional services and educational organization. Risks related to this reorganization include:


	•	the failure to identify and close upon significant consulting business opportunities;

	•	the integration of our professional services teams may prove to be unsuccessful, might take more time than anticipated or might cost more than expected;

	•	the highly discretionary nature of consulting expenditures;

	•	integration of the professional services teams and related activities may divert management’s attention; and

	•	integration of the professional services teams may be disruptive to pre-existing customer relationships.

We may not realize the desired benefits from our strategic alliances on a timely basis or at all. We face a number of risks relating to our strategic alliances, including the following:


	•	Our strategic alliances are generally terminable by either party with no or minimal notice or penalties. We may expend significant time, money and resources to further strategic alliances that are thereafter terminated.

	•	Business interests may diverge over time, which might result in conflict, termination or a reduction in collaboration. For example, our alliance with Internet Security Systems terminated following the announcement of our acquisition of Entercept and IntruVert.

	•	Strategic alliances require significant coordination between the parties involved. To be successful, our alliances may require the integration of other companies’ products with our products, which may involve significant time and expenditure by our technical staff and the technical staff of our strategic allies.

	•	Our sales and marketing force may require additional training to market products that result from our strategic alliances. The marketing of these products may require additional sales force efforts and may be more complex than the marketing of our own products.

	•	The integration of products from different companies may be more difficult than we anticipate. The risk of integration difficulties, incompatible products and undetected programming errors or bugs may be higher than that normally associated with new products.


	•	Our strategic alliances may involve providing professional services, which might require significant additional training of our professional services personnel and coordination between our professional services personnel and other third-party professional service personnel.

	•	Due to the complex nature of our products and of those parties with whom we have strategic alliances, it may take longer then we anticipate to successfully integrate and market our respective products.

We Face Product Development Risks Associated with Rapid Technological Changes in Our Market.

The markets for our products are highly fragmented and characterized by ongoing technological developments, evolving industry standards and rapid changes in customer requirements. Our success depends on our ability to timely and effectively:


	•	offer a broad range of network and system protection products;

	•	enhance existing products and expand product offerings;

	•	respond promptly to new customer requirements and industry standards; and

	•	remain compatible with popular operating systems such as Linux, NetWare, Windows XP, Windows 2000, Windows 98 and Windows NT, and develop products that are compatible with new or otherwise emerging operating systems.

We may experience delays in product development as we have at times in the past. Complex products like ours may contain undetected errors or version compatibility problems, particularly when first released, which could delay or harm market acceptance.

Our long-term success depends on our ability to keep our products current. For example, the proliferation of new and changing viruses makes it imperative to update anti-virus products frequently to avoid obsolescence. Accordingly, we must upgrade and update existing product offerings, modify and enhance acquired products and introduce new products that meet our customers’ needs. We believe that our ability to provide these upgrades and updates frequently and at low cost is key to our success.

Customers of our on-line subscription services essentially “rent” the use of our software. For example, McAfee System Protection Solutions offers on-line subscription services to corporate customers, and our McAfee.com website is dedicated to updating, upgrading and managing PCs over the Internet for consumers and small to medium-sized businesses. This web-based model is a relatively new concept and our on-line subscription services may fail to maintain or increase market acceptance. The growth, market acceptance and ultimate profitability of our on-line subscription services is highly uncertain and subject to a number of factors, including:


	•	our ability to successfully adapt existing products or develop new or enhanced products that operate in a fast, secure and reliable manner over the Internet;

	•	increased expenditures associated with the creation of a new business or delivery platform, such as product development, marketing and technical and administrative support;

	•	the introduction of new products by third-party competitors; and

	•	our ability to properly price our products and services to generate the greatest revenue opportunities.

Our Managed Service Provider Strategy Exposes Us to Risks in Addition to Those Generally Experienced with Our On-Line Subscription Services Strategy.

We also make our on-line subscription products and services available over the Internet in what we refer to as a managed environment. Unlike with our on-line subscription services, managed service provider, or


	•	effectively monitor and customize each customer’s managed services;

	•	attract and retain qualified networking professionals to manage customer accounts; and

	•	effectively price our products and services to account for the higher costs associated with selling managed services.

We also allow intermediaries, such as Internet service providers, to sell and host our products and services in a managed environment. This MSP reseller strategy exposes us to additional risks:


	•	we must select, train and maintain qualified and financially stable MSP resellers;

	•	it is more difficult for us to ensure customer satisfaction as we do not have direct customer contact and we rely on our resellers to timely and properly customize and administer our products and services;

	•	we must develop and maintain mutually satisfactory revenue sharing arrangements with our MSP resellers; and

	•	our MSP resellers may compete with our own MSP efforts.

Our Products Face Manufacturing, Supply, Inventory, Licensing and Obsolescence Risks.

We rely on a small number of third parties to manufacture some of our hardware-based network protection and system protection products. We expect the number of our hardware-based products and our reliance on third-party manufacturers to increase as software-only network and system security solutions become less viable. Reliance on third-party manufacturers, including software replicators, involves a number of risks, including the lack of control over the manufacturing process and the potential absence or unavailability of adequate capacity. If any of our third party manufacturers cannot or will not manufacture our products in required volumes on a cost-effective basis, in a timely manner, or at all, we will have to secure additional manufacturing capacity. Even if this additional capacity is available at commercially acceptable terms, the qualification process could be lengthy and could cause interruptions in product shipments. The unexpected loss of any of our manufacturers would be disruptive to our business.

Our hardware-based products contain critical components supplied by a single or a limited number of third parties. Any significant shortage of components or the failure of the third-party supplier to maintain or enhance these products could lead to cancellations of customer orders or delays in placement of orders.

Some of our products incorporate licensed software. We must be able to obtain reasonably priced licenses and successfully integrate this software with our hardware.

Hardware based products may face greater obsolescence risks than software products. We could incur losses or other charges in disposing of obsolete inventory.

Although we intend to support other operating systems, we seek to be the leading supplier of network security and management products for Windows/ Intel based networks. Sales of our products would be materially and adversely affected by market developments that are adverse to the Windows operating environments, including the failure of users and application developers to accept Windows. In addition, our

ability to develop products using the Windows operating environments is dependent on our ability to gain timely access to, and to develop expertise in, current and future developments by Microsoft. We may be unable in the future to gain the necessary access from Microsoft to its product development activities, particularly in light of Microsoft’s recent acquisition of GeCAD Software, an anti-virus software provider.

We May Fail to Support Operating Systems Which Successfully Compete with Microsoft’s Technology, Including Competing Versions of the Unix Operating System.

We are expanding our product support to include the Unix operating system and the Linux operating system. Sales of our products could be materially and adversely impacted by our failure to support those operating systems or competing operating systems that receive broad market acceptance. The Unix system encompasses many separate operating systems of which we only support a few. In recent periods, the Linux operating system has gained broader market acceptance at the expense of Unix operating systems. As a result, we placed our anti-virus products for Sun Microsystems’ Solaris Unix operating system into a maintenance only mode. If we fail to adequately support the Linux operating system or if the Unix versions supported by us are disproportionately affected by the success of Linux, our product sales may be adversely impacted.

Some of our customer’s have outsourced the management of their information technology departments to large system integrators. If this trend continues we face the risk that our established customer relationships could be disrupted and our products displaced by alternative system and network protection solutions offered by system integrators. Significant product displacements as a result of information technology department outsourcing could impact our revenue and have a material adverse effect on our business.

We Rely Heavily on Our Intellectual Property Rights Which Offer Only Limited Protection Against Potential Infringers.

We rely on a combination of contractual rights, trademarks, trade secrets, patents and copyrights to establish and protect proprietary rights in our software. However, the steps taken by us to protect our proprietary software may not deter its misuse or theft. We are aware that a substantial number of users of our anti-virus products have not paid any registration or license fees to us. Competitors may also independently develop technologies or products that are substantially equivalent or superior to our products. Certain jurisdictions may not provide adequate legal infrastructure for effective protection of our intellectual property rights. Changing legal interpretations of liability for unauthorized use of our software or lessened sensitivity by corporate, government or institutional users to avoiding infringement of intellectual property could also harm our business.

Intellectual Property Litigation in the Network Security and Management Market is Common and Can Be Expensive.

Litigation may be necessary to enforce and protect trade secrets and other intellectual property rights that we own. Similarly, we may be required to defend against claimed infringement by others.

In addition to the expense and distractions associated with litigation, adverse determinations could:


	•	result in the loss of our proprietary rights;

	•	subject us to significant liabilities, including monetary liabilities;

	•	require us to seek licenses from third parties; or

	•	prevent us from manufacturing or selling our products.

The litigation process is subject to inherent uncertainties. We may not prevail in these matters, or we may be unable to obtain licenses with respect to any patents or other intellectual property rights that may be held valid or infringed upon by our products or us.

If we acquire a portion of software included in our products from third parties, our exposure to infringement actions may increase because we must rely upon these third parties as to the origin and ownership of any software being acquired. Similarly, notwithstanding measures taken by our competitors or us to protect our competitors’ intellectual property, exposure to infringement claims increases if we employ or hire software engineers previously employed by competitors. Further, to the extent we utilize “open source” software we face risks. For example, the scope and requirements of the most common open source software license, the GNU General Public License (GPL), have not been interpreted in a court of law. Use of GPL software could subject certain portions of our proprietary software to the GPL requirements. Other forms of “open source” software licensing present license compliance risks, which could result in litigation or loss of the right to use this software.

Pending or Future Litigation Could Have a Material Adverse Impact on Our Results of Operation and Financial Condition.

In addition to intellectual property litigation, from time to time, we have been subject to litigation. Where we can make a reasonable estimate of the liability relating to pending litigation and determine that it is probable, we record a related liability. As additional information becomes available, we assess the potential liability and revise estimates as appropriate. However, because of uncertainties relating to litigation, the amount of our estimates could be wrong. In addition to the related cost and use of cash, pending or future litigation could cause the diversion of management’s attention and resources. A putative securities class action is currently pending against us, our directors and our former officers. We recently entered into a memorandum agreement of settlement resolving the litigation for $70 million. The settlement is subject to final court approval and may not be approved.

During the 12-month period ended September 30, 2003, our stock price was highly volatile ranging from a per share high of $20.70 to a low of $8.14. On November 10, 2003, our stock’s closing price per share was $13.93. Announcements, business developments, such as a material acquisition, litigation developments, and our ability to meet the expectations of investors with respect to our operating and financial results may contribute to current and future stock price volatility. Certain types of investors may choose not to invest in stocks with this level of stock price volatility. Further, we may not discover, or be able to confirm, revenue or earnings shortfalls until the end of a quarter. This could result in an immediate drop in our stock price. Securities class action litigation has been instituted following previous periods of volatility.

Our products are used to protect and manage computer systems and networks that may be critical to organizations. Because of the complexity of the environments in which our products operate, an error, failure or bug in our products could disrupt or cause damage to the networks of our customers, including disruption of legitimate network traffic by our intrusion prevention products. Failure of our products to perform to specifications, disruption of our customers’ network traffic or damages to our customer’s networks caused by our products could result in product liability damage claims by our customers. Our license agreements with our customers typically contain provisions designed to limit our exposure to potential product liability claims. It is possible, however, that the limitation of liability provisions may not be effective under the laws of certain jurisdictions, particularly in circumstances involving unsigned licenses.

Due to our high profile in the security software market, we have been a target of computer hackers who have, among other things, created viruses to sabotage or otherwise attack our products and services, including our various websites. For example, we have recently seen the spread of viruses, or worms, that intentionally delete anti-virus and firewall software. Similarly, hackers may attempt to penetrate our network security and misappropriate proprietary information or cause interruptions of our internal systems and services. Also, a number of websites have been subject to denial of service attacks, where a website is bombarded with

information requests eventually causing the website to overload, resulting in a delay or disruption of service. If successful, any of these events could damage users’ or our computer systems. In addition, since we do not control diskette duplication by distributors or our independent agents, diskettes containing our software may be infected with viruses.

False Detection of Viruses and Actual or Perceived Security Breaches Could Adversely Affect Our Business.

Our anti-virus software products have in the past and may at times in the future falsely detect viruses that do not actually exist. These false alarms, while typical in the industry, may impair the perceived reliability of our products and may therefore adversely impact market acceptance of our products. In addition, we have in the past been subject to litigation claiming damages related to a false alarm, and similar claims may be made in the future. An actual or perceived breach of network or computer security at one of our customers, regardless of whether the breach is attributable to our products, could adversely affect the market’s perception of our security products.

Our anti-spam products may falsely identify e-mails as unwanted “spam,” reducing the adoption of these products, or alternatively fail to properly identify unwanted e-mails, particularly as spam e-mails are often designed to circumvent anti-spam products. Parties whose e-mails are blocked by our products may also seek redress against us for labeling them as spammers or for interfering with their business.

Business Interruptions May Impede Our Operations and the Operations of Our Customers.

We and our customers face a number of potential business interruption risks that are beyond our respective control. Natural disasters or other events could interrupt our business or the business of our customers’, and each of us is reliant on external infrastructure that may be antiquated. For example, many parts of the United States and Canada experienced a widespread power blackout in August 2003, adversely impacting business in those areas. Our corporate headquarters are located near a major earthquake fault. The potential impact of a major earthquake on our facilities, infrastructure and overall operations is not known. Despite safety precautions that have been implemented, there is no guarantee that an earthquake would not seriously disturb our entire business process. We are largely uninsured for losses and business disruptions caused by an earthquake and other natural disasters.

The U.S. Military Global Presence and Potential Terrorist Attacks Could Have a Material Adverse Effect on the U.S. and Global Economies and Could Adversely Impact the Internet and Our Products and Business.

The U.S. military global presence, coupled with the possibility of potential terrorist attacks, could have a continued adverse effect upon an already weakened world economy and could cause U.S. and foreign businesses to slow spending on products and services, delay sales cycles and otherwise negatively impact consumer and business confidence. Terrorists may also seek to interfere with the operation of the Internet, the operation of our customers’ computer systems and networks, and the operation of our systems and networks, particularly given our status as an American company providing security products. Any significant interruption of the Internet could adversely impact our ability to rapidly and efficiently provide anti-virus and other product updates to our customers.

Our customers include the U.S. government and a significant number of other U.S. state and local governments or agencies. We are also currently engaged in several research and development contracts with U.S. government agencies.

Contracting with public sector customers is highly competitive and can be expensive and time-consuming, often requiring that we incur significant upfront time and expense without any assurance that we will win a contract. Public sector customers may also change the way they procure new contracts and may adopt new rules or regulations governing contract procurement, including required competitive bidding or use of “open source” products, where available.

Minimum fee awards for companies entering into U.S. government contracts are generally between 3% and 7% of the costs incurred by them in performing their duties under the related contract. However, these fees may be as low as 1% of contract costs.

Demand and payment for our products and services are impacted by public sector budgetary cycles and funding availability, with funding reductions or delays adversely impacting public sector demand for our products and services.

Public sector customers often have contractual or other legal rights to terminate current contracts for convenience or due to a default. If a contract is cancelled for convenience, which can occur if the customer’s product needs change, we may only be able to collect for products and services delivered prior to termination. If a contract is cancelled because of default, we may only be able to collect for products and services delivered, and we may be forced to pay any costs incurred by the customer for procuring alternative products and services. The U.S. government may also terminate contracts with us if we come under foreign government control or influence, require that we disclose our pricing data during the course of negotiations, ban us from doing business with any government entity; and require us to prevent access to classified data.

U.S. government and other state and local agencies routinely investigate and audit government contractors’ administrative processes. They may audit our performance and pricing and review our compliance with applicable rules and regulations. If they find that we have improperly allocated costs, they may require us to refund those costs or may refuse to pay us for outstanding balances related to the improper allocation. An unfavorable audit could result in a reduction of revenue, and may result in civil or criminal liability if the audit uncovers improper or illegal activities.

Some agencies within the U.S. government require some or all of our personnel to obtain proper security clearance. If our key personnel are unable to obtain or retain this clearance, we may be unable to bid for or retain some government contracts.

We have made a number of venture and minority investments in private companies with complementary products, services and technologies. During 2002 and 2001, we recorded impairment charges of $0.2 million and $20.6 million, respectively, in connection with these investments. We may make additional strategic investments. These investments are speculative in value, and we may lose all or part of the money invested.

Some of our computer security solutions, particularly those incorporating encryption, may be subject to export restrictions. As a result, some products may not be exported to international customers without prior

U.S. government approval. The list of products and end users for which export approval is required, and the regulatory policies with respect thereto, are subject to revision by the U.S. government at any time. The cost of compliance with U.S. and international export laws and changes in existing laws could affect our ability to sell certain products in certain markets and could have a material adverse effect on our international revenues.

Future Sales of Our Common Stock in the Public Market or Option Exercises and Sales Could Lower Our Stock Price.

A substantial number of the shares of our common stock are subject to stock options and our outstanding convertible notes may be converted into shares of common stock. We cannot predict the effect, if any, that future sales of shares of common stock, or the availability of shares of common stock for future sale, will have on the market price of our common stock. Sales of substantial amounts of common stock, including shares issued upon the exercise of stock options or the conversion of our outstanding convertible notes, or the perception that such sales could occur, may adversely affect prevailing market prices for our common stock.

Our Charter Documents and Delaware Law and Our Rights Plan may Impede or Discourage a Takeover, Which Could Lower Our Stock Price.

Pursuant to our charter, our board of directors has the authority to issue up to 5,000,000 shares of preferred stock and to determine the price, rights, preferences, privileges and restrictions, including voting rights, of those shares without any further vote or action by our stockholders. The issuance of preferred stock could have the effect of making it more difficult for a third party to acquire a majority of our outstanding voting stock.

Our classified board and other provisions of Delaware law and our certificate of incorporation and bylaws, could also delay or make a merger, tender offer or proxy contest involving us more difficult. For example, any stockholder wishing to make a stockholder proposal (including director nominations) at our 2004 annual meeting, must meet the qualifications and follow the procedures specified under both the Exchange Act of 1934 and our bylaws, which our board most recently amended in July 2003 and which are filed with the SEC. Among other requirements, a stockholder proposal for our 2004 annual meeting must be validly submitted to us by December 31, 2003.

Our board of directors has adopted a stockholders’ rights plan. The rights will become exercisable the tenth day after a person or group announces acquisition of 15% or more of our common stock or announces commencement of a tender or exchange offer the consummation of which would result in ownership by the person or group of 15% or more of our common stock. If the rights become exercisable, the holders of the rights (other than the person acquiring 15% or more of our common stock) will be entitled to acquire in exchange for the rights’ exercise price, shares of our common stock or shares of any company in which we are merged with a value equal to twice the rights’ exercise price.

Our management evaluated, with the participation of our Chief Executive Officer (CEO) and Chief Financial Officer (CFO), the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended) as of the end of the period covered by this quarterly report on Form 10-Q. Based on this evaluation, our CEO and CFO have concluded that our disclosure controls and procedures are effective to ensure that information we are required to disclose in reports that we file or submit under the Securities Exchange Act of 1934 is recorded, processed, summarized and reported within the time periods specified in Securities and Exchange Commission rules and forms. There has been no change in our internal control over financial reporting that occurred during the period covered by the quarterly report on Form 10-Q that materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Information with respect to this item is incorporated by reference to Note 13 of the Notes to the Condensed Consolidated Financial Statements included herein beginning on page 30 of this Report on Form 10-Q.

Stockholders who wish to present proposals at our 2004 annual meeting must submit their proposals in accordance with our bylaws and be received by us no later than December 31, 2003 in order for their proposals to be considered for inclusion in our proxy statement and form of proxy relating to that meeting and be considered at the meeting.

Our Insider Trading Policy allows directors, officers and other employees covered under the policy to establish, under limited circumstances contemplated by Rule 10b5-1 under the Securities Exchange Act of 1934, written programs that permit automatic trading of our stock or trading of our stock by an independent person (such as an investment bank) who is not aware of material inside information at the time of the trade. As of the filing date of this report, George Samenuk, our Chairman and Chief Executive Officer, Stephen C. Richards, our Chief Operating Officer and Chief Financial Officer, Vernon Gene Hodges, our President, Kent H. Roberts, our Executive Vice President and General Counsel, and Arthur Matin, President of our McAfee Security business, each a Section 16 officer, have adopted Rule 10b5-1 trading plans. In addition, Amanda Hodges, the wife of our President, has also adopted a Rule 10b5-1 trading plan. We believe that additional directors, officers and employees have established or may establish such programs As a result of our March 2003 announced restatement of certain prior period financial statements and the delay in the filing of our 2002 Form 10-K, all trades in our stock by our Section 16 officers, including trades pursuant to Rule 10b5-1 trading plans, were suspended and continue to remain suspended. All trades in our common stock made during 2003, prior to such suspension, by officers who have adopted Rule 10b5-1 trading plans were made pursuant to the terms of such plans.

(a) Exhibits. The exhibits listed in the accompanying Exhibit Index are filed or incorporated by reference as part of this Report.

On July 16, 2003, we furnished a report on Form 8-K to announce our anticipated second quarter financial results.

On September 29, 2003, we filed a report on Form 8-K to announce updated timing for filing our restated financial results.

On October 23, 2003, we furnished a Form 8-K to announce our third quarter results.

On November 3, 2003, we furnished a Form 8-K to announce the completion of the previously announced restatement of financial statements and the filing of certain documents with the Securities and Exchange Commission.

Pursuant to the requirements of the Securities Exchange Act of 1934, and the results and regulations promulgated thereunder, the registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.


	NETWORKS ASSOCIATES, INC.

	/s/ STEPHEN C. RICHARDS

	Name: Stephen C. Richards


	Title:	Chief Operating Officer and


	Chief Financial Officer


	(1)	Incorporated by reference from the Registrant’s Registration Statement on Form S-4 filed with the Commission on October 31, 1997.


	(2)	Incorporated by reference from the Registrant’s Current Report on Form 8-K filed with the Commission on September 24, 1996.

	(3)	Incorporated by reference from the Registrant’s Current Report on Form 8-K filed with the Commission on March 14, 1997.

	(4)	Incorporated by reference from the Registrant’s Registration Statement on Form S-3, filed with the Commission on February 11, 1998.

	(5)	Incorporated by reference from the Registrant’s Report on Form 8-K/ A filed with the Commission on February 28, 1995.

	(6)	Incorporated by reference from the Registrant’s Registration Statement on Form S-4 filed with the Commission on March 25, 1998.

	(7)	Incorporated by reference from the Registrant’s Report on Form 8-K filed with the Commission on April 3, 1998.

	(8)	Incorporated by reference from the Registrant’s Registration Statement on Form S-3 filed with the Commission on May 26, 1998.

	(9)	Incorporated by reference from the Registrant’s Report on Form 10-Q for the quarter ended September 30, 1996, filed with the Commission on November 14, 1996.


(10)	Incorporated by reference from the Registrant’s Registration Statement on Form S-3 filed with the Commission on May 6, 1998.

(11)	Incorporated by reference from the Registrant’s Registration Statement on Form S-8 filed with the Commission on June 28, 2002.

(12)	[Reserved]

(13)	Incorporated by reference from the Registrant’s Report on Form 8-K filed with the Commission on June 16, 1998.

(14)	Incorporated by reference from CyberMedia Inc.’s Schedule 13D filed by the Registrant with the Commission on August 7, 1998. CyberMedia Inc.’s filings with the Commission were made under File Number 0-21289.

(15)	Incorporated by reference from the Registrant’s Report on Form 8-A filed with the Commission on October 22, 1998.

(16)	Incorporated by reference from the Registrant’s report on Form 10-K for the year ended December 31, 2000, filed with the Commission on April 2, 2001.

(17)	Incorporated by reference from the Registrant’s report on Form 10-Q for the quarter ended March 31, 2001, filed with the Commission on May 15, 2001.

(18)	Incorporated by reference from the Registrant’s Registration Statement on Form S-3 filed with the Commission on November 9, 2001.

(19)	Incorporated by reference from the Registrant’s report on Form 10-Q for the quarter ended September 30, 2001, filed with the Commission on November 13, 2001.

(20)	Incorporated by reference from the Registrant’s report on Form 10-K for the year ended December 31, 2001, filed with the Commission on February 8, 2002.

(21)	Incorporated by reference from the Registrant’s report on Form 10-Q for the quarter ended September 30, 2002, filed with the Commission on November 12, 2002.

(22)	Incorporated by reference from the Registrant’s report on Form 10-K for the year ended December 31, 2002, filed with the Commission on October 31, 2003.


	*	Management contracts or compensatory plans or arrangements covering executive officers or directors of Networks Associates, Inc.


(Mark One)
þ		QUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

		For the quarterly period ended September 30, 2003

or

o		TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

		For the transition period from to


Delaware (State or other jurisdiction of incorporation or organization)		77-0316593 (I.R.S. Employer Identification Number)

3965 Freedom Circle Santa Clara, California (Address of principal executive offices)		95054 (Zip Code)


		CONDENSED CONSOLIDATED BALANCE SHEETS
		CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS AND COMPREHENSIVE INCOME
		CONDENSED CONSOLIDATED STATEMENTS OF CASH FLOWS
		NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS
Condensed Consolidated Statement of Operations
	Item 2. Management’s Discussion and Analysis of Financial Condition and Results of Operations
	Item 3. Quantitative and Qualitative Disclosure about Market Risk
RISK FACTORS
	Item 4. Controls and Procedures
PART II: OTHER INFORMATION
	Item 1. Legal Proceedings:
	Item 2. Changes in Securities:
	Item 3. Defaults in Securities:
	Item 4. Submission of Matters to a Vote of Security Holders:
	Item 5. Other Information:
	Item 6.Exhibits and Reports on Form 8-K:
SIGNATURES
EXHIBIT INDEX
EX-12.1 Ratio of Earnings to Fixed Charges
EX-31.1 Certification of CEO & CFO - Section 302
EX-32.1 Certification of CEO & CFO - Section 906


Item
Number		Page

PART I: FINANCIAL INFORMATION
Item 1.	*Financial Statements (Unaudited)*
	Condensed Consolidated Balance Sheets: September 30, 2003 and December 31, 2002		2
	Condensed Consolidated Statements of Operations and Comprehensive Income:
	Three and Nine months ended September 30, 2003 and 2002		3
	Condensed Consolidated Statements of Cash Flows:
	Nine months ended September 30, 2003 and 2002		5
	Notes to Condensed Consolidated Financial Statements		6
Item 2.	*Management’s Discussion and Analysis of Financial Condition and Results of Operations*		35
Item 3.	*Quantitative and Qualitative Disclosures about Market Risk*		56
Item 4.	*Controls and Procedures*		70
PART II: OTHER INFORMATION
Item 1.	*Legal Proceedings*		71
Item 2.	*Changes in Securities*		71
Item 3.	*Defaults in Securities*		71
Item 4.	*Submission of Matters to a Vote of Security Holders*		71
Item 5.	*Other Information*		71
Item 6.	*Exhibits and Reports on Form 8-K*		71
SIGNATURES			73
EXHIBIT INDEX


			September 30,			December 31,
			2003			2002


			(In thousands, except share
			and per share data)
			(Unaudited)
ASSETS
Current assets:
	Cash and cash equivalents		$	354,575		$	674,226
	Short-term marketable securities			96,826			133,577
	Accounts receivable, net			126,246			160,159
	Prepaid expenses, income taxes and other current assets			75,317			52,238
	Deferred taxes			140,941			174,469

		Total current assets		793,905			1,194,669
Long-term marketable securities				311,032			205,906
Restricted cash				21,034			21,211
Property and equipment, net				109,695			89,277
Deferred taxes				177,061			139,091
Intangible assets, excluding goodwill, net				118,410			93,551
Goodwill, net				450,336			273,934
Other assets				23,781			27,848

		Total assets	$	2,005,254		$	2,045,487

LIABILITIES
Current liabilities:
	Accounts payable		$	34,815		$	29,948
	Accrued liabilities			375,037			383,458
	Deferred revenue			341,334			292,277
	Current portion of convertible debt			—			176,260

		Total current liabilities		751,186			881,943
Deferred revenue, less current portion				55,838			36,918
Convertible debt, less current portion				352,362			356,013
Other long term liabilities				15,300			445

		Total liabilities		1,174,686			1,275,319

Contingencies (Notes 13 and 14)
STOCKHOLDERS’ EQUITY
Preferred stock, $0.01 par value:
	Authorized: 5,000,000 shares; Issued and outstanding: none at September 30, 2003 and December 31, 2002			—			—
Common stock, $0.01 par value:
	Authorized: 300,000,000 shares; Issued and outstanding: 160,329,178 shares at September 30, 2003 and 157,926,732 shares at December 31, 2002			1,603			1,579
Additional paid-in capital				1,070,307			1,050,288
Deferred stock-based compensation				(916	)		(5,736	)
Accumulated other comprehensive income				34,475			24,158
Accumulated deficit				(274,901	)		(300,121	)

		Total stockholders’ equity		830,568			770,168

		Total liabilities and stockholders’ equity	$	2,005,254		$	2,045,487



			Three Months Ended						Nine Months Ended
			September 30,						September 30,

			2003			2002			2003			2002

						(As Restated)						(As Restated)

			(In thousands, except per share data)
			(Unaudited)
Net revenue:
	Product		$	120,372		$	160,079		$	366,880		$	468,499
	Services and support			106,482			94,351			296,701			305,020

		Total net revenue		226,854			254,430			663,581			773,519

Cost of net revenue:
	Product			22,484			24,429			61,539			77,290
	Services and support			12,016			15,172			38,248			45,370
	Amortization of purchased technology			3,435			696			7,952			1,963

		Total cost of net revenue		37,935			40,297			107,739			124,623

Operating costs and expenses:
	Research and development(1)			46,705			37,824			138,087			105,881
	Marketing and sales(2)			91,405			98,719			267,105			307,919
	General and administrative(3)			37,822			35,489			97,432			82,193
	Acquisition related costs not subject to capitalization			—			13,627			—			16,026
	Recovery of doubtful accounts, net			(79	)		(784	)		(789	)		(1,141	)
	Amortization of intangibles			3,637			2,395			12,369			6,495
	Restructuring charge			257			—			22,864			1,116
	In-process research and development			—			—			6,600			—

		Total operating costs and expenses		179,747			187,270			543,668			518,489

		Income from operations		9,172			26,863			12,174			130,407
Interest and other income				4,397			9,126			14,961			23,425
Interest expense				(1,222	)		(6,990	)		(6,427	)		(22,579	)
Gain (loss) on sale of assets and product lines				—			2,584			(867	)		10,015
Gain (loss) on repurchase of zero coupon convertible debentures				—			57			(2,727	)		26
Write-down of strategic and other investments				—			(198	)		—			(198	)

	Income before provision for (benefit from) income taxes, minority interest and cumulative effect of change in accounting principle			12,347			31,442			17,114			141,096
Provision for (benefit from) income taxes				2,470			(96	)		3,036			(308	)

	Income before minority interest and cumulative effect of change in accounting principle			9,877			31,538			14,078			141,404
Minority interest in net income (loss) of consolidated subsidiaries				—			2,586			—			(1,895	)

	Income before cumulative effect of change in accounting principle			9,877			34,124			14,078			139,509
Cumulative effect of change in accounting principle, net of tax				—			—			11,142			—

	Net income		$	9,877		$	34,124		$	25,220		$	139,509

Other comprehensive income (loss):
	Unrealized gain (loss) on marketable securities, net			(767	)		46			1			(2,310	)
	Foreign currency translation gain (loss)			27			(378	)		10,318			7,399

Comprehensive income			$	9,137		$	33,792		$	35,539		$	144,598

Basic income per share:
	Income before cumulative effect of change in accounting principle		$	0.06		$	0.23		$	0.09		$	0.95
	Cumulative effect of change in accounting principle, net of tax			—			—			0.07			—

	Net income per share — basic		$	0.06		$	0.23		$	0.16		$	0.95

	Shares used in per share calculation — basic			160,347			149,344			160,086			147,021

Diluted income per share:
	Income before cumulative effect of change in accounting principle		$	0.06		$	0.21		$	0.08		$	0.85
	Cumulative effect of change in accounting principle, net of tax			—			—			0.07			—

	Net income per share — diluted		$	0.06		$	0.21		$	0.15		$	0.85

	Shares used in per share calculation — diluted			164,141			173,914			164,398			174,043


		Three Months		Nine Months
		Ended		Ended
		September 30, 2002		September 30, 2002

Pro forma amounts assuming the change in accounting principle is applied retroactively:
	Net income	$	32,822	$	133,677
	Basic income per share	$	0.22	$	0.91
	Diluted income per share	$	0.21	$	0.82



			September 30, 2002

			As Previously
			Reported			As Restated			Difference


			(Unaudited)
			(In thousands)
ASSETS
Current assets:
	Cash and cash equivalents		$	633,952		$	633,952		$	—
	Short-term marketable securities			180,920			180,920			—
	Accounts receivable, net			114,727			114,706			(21	)
	Prepaid expenses, income taxes and other current assets			44,451			45,569			1,118
	Deferred taxes			148,694			169,015			20,321

		Total current assets		1,122,744			1,144,162			21,418
Long-term marketable securities				163,869			163,869			—
Restricted cash				20,229			20,229			—
Property and equipment, net				79,084			79,084			—
Deferred taxes				90,039			108,662			18,623
Intangible assets, excluding goodwill, net				89,608			89,608			—
Goodwill, net				302,523			272,681			(29,842	)
Other assets				25,181			25,181			—

		Total assets	$	1,893,277		$	1,903,476		$	10,199

LIABILITIES
Current liabilities:
	Accounts payable		$	22,474		$	22,474			—
	Accrued liabilities			357,818			340,622			(17,196	)
	Deferred revenue			253,923			271,972			18,049
	Current portion of convertible debt			174,203			174,203			—

		Total current liabilities		808,418			809,271			853
Deferred revenue, less current portion				28,548			29,538			990
Convertible debt, less current portion				356,266			356,266			—
Other long term liabilities				434			434			—

	Total liabilities			1,193,666			1,195,509			1,843

STOCKHOLDERS’ EQUITY
Preferred stock				—			—			—
Common stock				1,564			1,564			—
Additional paid-in capital				975,763			984,522			8,759
Deferred compensation				(7,721	)		(7,721	)		—
Cumulative other comprehensive income (loss)				(25,256	)		18,522			43,778
Accumulated deficit				(244,739	)		(288,920	)		(44,181	)

	Total stockholders’ equity			699,611			707,967			8,356

		Total liabilities, minority interest and stockholders’ equity	$	1,893,277		$	1,903,476		$	10,199



				Three Months Ended September 30, 2002									Nine Months Ended September 30, 2002

				As Previously									As Previously
				Reported			As Restated			Difference			Reported			As Restated			Difference


				(In thousands, except per share data)
				(Unaudited)
Net revenue:
	Product			$	152,523		$	160,079		$	7,556		$	441,373		$	468,499		$	27,126
	Services and support				79,667			94,351			14,684			244,488			305,020			60,532

			Total net revenue		232,190			254,430			22,240			685,861			773,519			87,658

Cost of net revenue:
	Product				23,541			24,429			888			73,764			77,290			3,526
	Services and support				15,172			15,172			—			45,370			45,370			—
	Amortization of purchased technology				696			696			—			1,963			1,963			—

			Total cost of net revenue		39,409			40,297			888			121,097			124,623			3,526

Operating costs and expenses:
	Research and development				37,824			37,824			—			105,881			105,881			—
	Marketing and sales				98,719			98,719			—			307,919			307,919			—
	General and administrative				35,489			35,489			—			83,559			82,193			(1,366	)
	Acquisition related costs not subject to capitalization				13,627			13,627			—			16,026			16,026			—
	Recovery of doubtful accounts, net				(784	)		(784	)		—			(1,141	)		(1,141	)		—
	Amortization of intangibles				2,395			2,395			—			6,495			6,495			—
	Restructuring charge				—			—			—			1,116			1,116			—

			Total operating costs and expenses		187,270			187,270			—			519,855			518,489			(1,366	)

			Income from operations		5,511			26,863			21,352			44,909			130,407			85,498
Interest and other income					9,126			9,126			—			23,425			23,425			—
Interest expense					(6,990	)		(6,990	)		—			(22,579	)		(22,579	)		—
Gain on sale of assets and product lines					2,584			2,584			—			9,301			10,015			714
Gain on repurchase of debt					57			57			—			26			26			—
Write-down of strategic and other investments					(198	)		(198	)		—			(198	)		(198	)		—

		Income before (benefit from) provision for income taxes and minority interest			10,090			31,442			21,352			54,884			141,096			86,212
Provision for (benefit from) income taxes					3,121			(96	)		(3,217	)		7,766			(308	)		(8,074	)

Income before minority interest					6,969			31,538			24,569			47,118			141,404			94,286
Minority interest in loss of consolidated subsidiaries					2,121			2,586			465			(1,075	)		(1,895	)		(820	)

			Net income	$	9,090		$	34,124		$	25,034		$	46,043		$	139,509		$	93,466

Other comprehensive income (loss):
	Unrealized gain (loss) on investments			$	46		$	46		$	—		$	(2,310	)	$	(2,310	)	$	—
	Foreign currency translation loss				(378	)		(378	)		—			7,399			7,399			—

Comprehensive income				$	8,758		$	33,792		$	25,034		$	51,132		$	144,598		$	93,466

Basic net income per share:
Net income per share — basic				$	0.06		$	0.23		$	0.17		$	0.31		$	0.95		$	0.64

Shares used in per share calculation — basic					149,344			149,344			—			147,021			147,021			—

Diluted net income per share:
Net income per share — diluted				$	0.06		$	0.21		$	0.15		$	0.30		$	0.85		$	0.55

Shares used in per share calculation — diluted					154,822			173,914			19,092			154,952			174,043			19,092


	*Restatement to Sell-through Basis of Revenue Recognition*


	*Allocation of Revenue in Multiple-element Arrangements*



		Three Months Ended				Nine Months Ended
		September 30, 2003				September 30, 2003

		Before		After		Before		After
		Commission		Commission		Commission		Commission
		Change		Change		Change		Change

Operating expenses		$	181,144	$	179,747	$	545,994	$	543,668

Income before cumulative effect of change in accounting principle		$	9,039	$	9,877	$	12,682	$	14,078

	Per common share — basic	$	0.06	$	0.06	$	0.08	$	0.09

	Per common share — diluted	$	0.06	$	0.06	$	0.08	$	0.08

Net income		$	9,039	$	9,877	$	12,682	$	25,220

	Per common share — basic	$	0.06	$	0.06	$	0.08	$	0.16

	Per common share — diluted	$	0.06	$	0.06	$	0.08	$	0.15


	Accounting for Extraordinary Items and Discontinued Operations


	Accounting for Derivative Instruments and Hedging Activities


	Accounting for Certain Financial Instruments with Characteristics of both Liabilities and Equity


1.	Organization and Business


2.	Restatement


	*Cost of Product Revenue*


	*Stock-based Compensation Charge*


	Accounting for Consolidation of Variable Interest Entities


						Total Assets
		IntruVert		Entercept Security		Acquired and
		Networks, Inc.		Technologies, Inc.		Liabilities Assumed


		(In thousands)
Deferred tax assets		$	436	$	10,560	$	10,996
Technology			18,200		21,700		39,900
Other intangible assets			1,900		2,800		4,700
Cash			10,986		1,028		12,014
Goodwill			74,133		101,036		175,169
Other assets			5,321		3,650		8,971

	Total assets acquired		110,976		140,774		251,750
Current liabilities			3,151		6,028		9,179
Deferred tax liabilities			10,062		9,906		19,968

	Total liabilities assumed		13,213		15,934		29,147

Net assets acquired		$	97,763	$	124,840	$	222,603

In-process research and development (expensed)		$	5,700	$	900	$	6,600

Total acquisition cost		$	103,463	$	125,740	$	229,203


		September 13,
		2002

		(In thousands)
Deferred tax assets			25,767
Technology			1,401
Other intangible assets			49,335
Goodwill			145,756
Minority interest			21,044

	Total assets acquired	$	243,303
Current liabilities			2,065
Deferred tax liabilities			21,345

	Total liabilities assumed	$	23,410

Net assets acquired		$	219,893


	January 1,		Goodwill				Effects of Foreign		September 30,
	2003		Acquired		Adjustments		Currency Exchange		2003

United States	$	227,395	$	175,313	$	—	$	—	$	402,708
EMEA		25,424		—		—		1,089		26,513
Japan		12,071		—		—		—		12,071
Canada		4,727		—		—		—		4,727
Asia-Pacific (excluding Japan)		2,301		—		—		—		2,301
Latin America		2,016		—		—		—		2,016

Total	$	273,934	$	175,313	$	—	$	1,089	$	450,336



		September 30, 2003							December 31, 2002

				Accumulated							Accumulated
				Amortization							Amortization
		Gross		(Including Effects			Net		Gross		(Including Effects			Net
		Carrying		of Foreign Currency			Carrying		Carrying		of Foreign Currency			Carrying
		Amount		Exchange)			Amount		Amount		Exchange)			Amount

Other intangible assets:
	Purchased technologies	$	110,706	$	(55,610	)	$	55,096	$	69,286	$	(45,995	)	$	23,291
	Trademarks, patents and other intangibles		109,188		(45,874	)		63,314		104,540		(34,280	)		70,260

		$	219,894	$	(101,484	)	$	118,410	$	173,826	$	(80,275	)	$	93,551


Fiscal Years:
	Remainder of 2003		$	7,522
	2004			27,495
	2005			24,536
	2006			21,667
	2007			18,615
		Thereafter		18,575

			$	118,410


				Severance
	Lease			and
	Termination			Other			Other
	Costs			Benefits			Costs			Total

Balance, January 1, 2003	$	—		$	—		$	—		$	—
Additional accrual		15,734			6,692			739			23,165
Cash payments		(1,189	)		(5,172	)		(328	)		(6,689	)
Adjustment to liability		(174	)		(126	)		—			(300	)
Accretion of interest		313			—			—			313

Balance, September 30, 2003	$	14,684		$	1,394		$	411		$	16,489


	*Impact of Restatement on Consolidated Financial Statements*


	*Three and Nine months ended September 30, 2003 and 2002*


	*Accounting for Extraordinary Items and Discontinued Operations*


	*Accounting for Derivative Instruments and Hedging Activities*


	*Accounting for Certain Financial Instruments with Characteristics of both Liabilities and Equity*


	*Accounting for Multiple Deliverable Revenue Arrangements*


	*Accounting for Consolidation of Variable Interest Entities*


Exhibit
Number			Description

	2.1	—	Agreement and Plan of Reorganization, dated October 13, 1997, among McAfee Associates, Inc., Mystery Acquisition Corp. and Network General Corporation, as amended by the First Amendment dated as of October 22, 1997.(1)
	2.2	—	Combination Agreement dated August 16, 1996 among the Registrant, FSA Combination Corp., FSA Corporation and Daniel Freedman.(2)
	2.3	—	Stock Exchange Agreement dated January 13, 1997 among the Registrant, FSA Combination Corp., Kabushiki Kaisha Jade and the shareholders of Jade.(3)
	2.4	—	Agreement and Plan of Reorganization dated December 1, 1997 between the Registrant, Helix Software Company and DNA Acquisition Corp.(4)
	2.5	—	Agreement and Plan of Reorganization dated December 1, 1997 between the Registrant, PGP and PG Acquisition Corp.(5)
	2.6	—	Agreement and Plan of Reorganization dated February 22, 1998, between the Registrant, TIS and Thor Acquisition Corp.(6)
	2.7	—	Agreement and Plan of Reorganization by and among the Registrant, Magic Solutions International, Inc., Merlin Acquisition Corp. and Igal Lichtman dated March 2, 1998. Amendment Agreement by and among the Registrant, Magic Solutions International, Inc., Merlin Acquisition Corp., and Igal Lichtman dated March 24, 1998. Second Amendment Agreement by and among the Registrant, Magic Solutions International, Inc., Merlin Acquisition Corp., and Igal Lichtman dated April 1, 1998.(7)
	2.8	—	Stock Purchase Agreement, dated as of February 26, 1998, by and between FSA Combination Corp., and Brenda Joyce Cook.(8)
	2.9	—	Share Purchase Agreement, dated as of March 30, 1998, among FSA Combination Corp., and Irina Karlsson and Jarmo Rouvinen.(8)
	2.10	—	Stock Purchase Agreement, dated as of May 10, 1998, among FSA Combination Corp., and Secure Networks, Inc.(8)
	2.11	—	Transaction Agreement, dated June 9, 1998, by and between the Registrant and Dr. Solomon’s Group Plc.(13)
	2.12	—	Agreement and Plan of Merger, dated July 28, 1998, by and between the Registrant and CyberMedia, Inc.(14)
	3.1	—	Second Restated Certificate of Incorporation of the Registrant, as amended on December 1, 1997.(6)
	3.2	—	Amended and Restated Bylaws of the Registrant.(22)
	3.3	—	Certificate of Designation of Series A Preferred Stock of the Registrant.(9)
	3.4	—	Certificate of Designation of Series B Participating Preferred Stock of the Registrant.(15)
	4.1	—	Indenture dated as of February 13, 1998 between the Registrant and State Street Bank and Trust Company of California, N.A., as Trustee.(10)
	4.2	—	Resale Registration Rights Agreement, dated as of August 17, 2001, by and between the Registrant and Lehman Brothers, Inc.(19)
	4.3	—	Indenture dated as of August 17, 2001 between the Registrant and State Street Bank and Trust Company of California.(18)
	10.1	—	Lease Assignment dated November 17, 1997 for facility at 3965 Freedom Circle, Santa Clara, California by and between Informix Corporation and McAfee Associates, Inc.(4)
	10.2	—	Consent to Assignment Agreement dated December 19, 1997 by and among Birk S. McCandless, LLC, Guaranty Federal Bank, F.S.B., Informix Corporation and the Registrant.(4)
	10.3	—	Subordination, Nondisturbance and Attornment Agreement dated December 18, 1997, between Guaranty Federal Bank, F.S.B., the Registrant and Birk S. McCandless, LLC.(4)
	10.4	—	Lease dated November 22, 1996 by and between Birk S. McCandless, LLC and Informix Corporation for facility at 3965 Freedom Circle, Santa Clara, California.(4)
	10.5	—	2002 Employee Stock Purchase Plan.(11)
	10.6*	—	1997 Stock Incentive Plan, as Amended.(11)
	10.7*	—	Amended and Restated 1993 Stock Option Plan for Outside Directors.(22)