Acrolinx and add FAQ to TOC.

Author: TimShererWithAquent

articles/partner-solutions/palo-alto/faq.yml

@@ -1,7 +1,7 @@
 ### YamlMime:FAQ
 metadata:
   title: Cloud NGFW by Palo Alto Networks frequently asked questions
-  description: Answers to common questions about using Cloud NGFW by Palo Alto Networks
+  description: Answers to common questions about using Cloud NGFW by Palo Alto Networks including deployment, management, and configuration.
   ms.topic: faq 
   ai-usage: ai-generated
   ms.date: 12/18/2025
@@ -13,7 +13,7 @@ sections:
   - name: General
     questions:
       - question: What is Cloud NGFW by Palo Alto Networks?
-        answer: Cloud NGFW by Palo Alto Networks is a next-generation firewall delivered as an integrated service on Azure. It's codeveloped and managed by Microsoft and Palo Alto Networks, and combines the scalability and reliability of Azure with Palo Alto Networks network security expertise. You can find it in Azure Marketplace and manage it through the Azure portal.
+        answer: Cloud NGFW by Palo Alto Networks is a next-generation firewall delivered as an integrated service on Azure. Microsoft and Palo Alto Networks codeveloped and managed it. The product combines the scalability and reliability of Azure with Palo Alto Networks network security expertise. You can find it in Azure Marketplace and manage it through the Azure portal.
       - question: What are the key capabilities of Cloud NGFW?
         answer: |
               Cloud NGFW by Palo Alto Networks provides core firewall capabilities including:
@@ -74,7 +74,7 @@ sections:
   - name: Networking and NAT
     questions:
       - question: What does DNAT do in Cloud NGFW?
-        answer: Destination Network Address Translation (DNAT) allows Cloud NGFW to accept client connections on public IP addresses and perform address translation and traffic inspection. This enables inbound connections to be routed to internal resources while enforcing security policies.
+        answer: Destination Network Address Translation (DNAT) allows Cloud NGFW to accept client connections on public IP addresses and perform address translation and traffic inspection. This approach enables inbound connections to be routed to internal resources while enforcing security policies.
       - question: What is Source NAT (SNAT) in Cloud NGFW?
         answer: Source Network Address Translation (SNAT) allows you to configure how outbound traffic from your virtual network is translated. You can specify public IP addresses for outbound traffic, and Cloud NGFW can replace the source IP with a trusted firewall IP address through Private Source NAT.
       - question: How do I configure traffic routing through Cloud NGFW?
@@ -88,14 +88,14 @@ sections:
         answer: Deploy Application Gateway in a separate virtual network and peer it with your hub network containing Cloud NGFW. Create user-defined routes in the Application Gateway subnet to direct traffic through Cloud NGFW for inspection. Application Gateway functions as a reverse proxy and WAF, while Cloud NGFW provides network security inspection.
       - question: Should I disable default route propagation when using Application Gateway with Virtual WAN?
         answer: |
-              Yes, when connecting the Application Gateway virtual network to a Virtual WAN hub, disable the **Propagate Default Route** option to prevent asymmetric routing. This allows Application Gateway-sourced traffic to break out locally rather than returning through the virtual hub.
+              Yes, when connecting the Application Gateway virtual network to a Virtual WAN hub, disable the **Propagate Default Route** option to prevent asymmetric routing. This configuration allows Application Gateway-sourced traffic to break out locally rather than returning through the virtual hub.
       - question: What traffic should go through Cloud NGFW versus Application Gateway?
         answer: HTTP and HTTPS web traffic should be routed through Application Gateway for reverse proxy, load balancing, and WAF protection. Non-HTTP connections should be directed to Cloud NGFW's public IP address for network inspection and policy enforcement.
 
   - name: Security Policy Considerations
     questions:
       - question: Is the X-Forwarded-For (XFF) HTTP header supported with Azure Rulestacks?
-        answer: Currently, use of the X-Forwarded-For (XFF) HTTP header field to enforce security policy is not supported with Azure Rulestacks. This limitation is important to consider when configuring policies for Application Gateway traffic.
+        answer: Currently, use of the X-Forwarded-For (XFF) HTTP header field to enforce security policy isn't supported with Azure Rulestacks. This limitation is important to consider when configuring policies for Application Gateway traffic.
       - question: How should I configure zone-based policies when using Panorama?
         answer: |
               When using Panorama with Cloud NGFW, configure two zones: private and public. Traffic flows are:
@@ -119,7 +119,7 @@ sections:
   - name: Billing and Plans
     questions:
       - question: What billing plan options are available?
-        answer: Cloud NGFW is available under a Pay-As-You-Go (PAYG) billing model. Billing through Azure provides unified invoicing for both infrastructure and software costs in a single line item.
+        answer: Cloud NGFW is available under a pay-as-you-go (PAYG) billing model. Billing through Azure provides unified invoicing for both infrastructure and software costs in a single line item.
       - question: Can I change my billing plan after deployment?
         answer: Yes. You can change your billing plan by selecting **Change Plan** from the resource overview page in the Azure portal.
       - question: How is Cloud NGFW billed?

articles/partner-solutions/palo-alto/index.yml

@@ -19,6 +19,8 @@ landingContent:
         links:
           - text: What is Cloud NGFW by Palo Alto Networks?
             url: overview.md
+          - text: FAQ
+            url: faq.yml
       - linkListType: how-to-guide
         links:
           - text: Manage your Cloud NGFW by Palo Alto Networks resource

articles/partner-solutions/palo-alto/toc.yml

@@ -5,6 +5,8 @@ items:
   items:
   - name: What is Cloud NGFW by Palo Alto Networks?
     href: overview.md
+  - name: FAQ
+    href: faq.yml
 - name: Quickstarts
   expanded: true
   items: