diff --git a/windows/security/operating-system-security/network-security/windows-firewall/best-practices-configuring.md b/windows/security/operating-system-security/network-security/windows-firewall/best-practices-configuring.md
index 9fe7225f69..3cf2628a6e 100644
--- a/windows/security/operating-system-security/network-security/windows-firewall/best-practices-configuring.md
+++ b/windows/security/operating-system-security/network-security/windows-firewall/best-practices-configuring.md
@@ -22,14 +22,12 @@ Windows offers different tools to view the status and configure Windows Firewall
:::column span="3":::
The *Windows Security* app can be used to view the Windows Firewall status and access advanced tools to configure it. Select START, type `Windows Security`, and press ENTER. Once Windows Security is open, select the tab **Firewall & network protection**. Or use the following shortcut:
> [!div class="nextstepaction"]
- > [Firewall & network protection][SEC-1]
+ > [Open Firewall & network protection][SEC-1]
:::column-end:::
:::column span="1":::
:::image type="content" source="images/windows-security.png" alt-text="Screenshot showing the QR code to scan from your phone or tablet." lightbox="images/windows-security.png" border="false":::
- > [!div class="nextstepaction"]
- > [Firewall & network protection][SEC-1]
:::column-end:::
:::row-end:::
:::row:::
@@ -69,11 +67,17 @@ If you are configuring a single device, you must have administrative rights on t
The *Overview* panel of the *Windows Firewall with Advanced Security* console displays security settings for each type of network to which the device can connect.
-
+### :::image type="icon" source="images/domain-network.svg" border="false"::: Domain network
-1. **Domain profile**: Used for networks where there's a system of account authentication against an Active Directory domain controller
-1. **Private profile**: Designed for and best used in private networks such as a home network
-1. **Public profile**: Designed with higher security in mind for public networks, like Wi-Fi hotspots, coffee shops, airports, hotels, or stores
+Used for networks where there's a system of account authentication against an Active Directory domain controller
+
+### :::image type="icon" source="images/domain-network.svg" border="false"::: Private network
+
+Designed for and best used in private networks such as a home network
+
+### :::image type="icon" source="images/domain-network.svg" border="false"::: Public network
+
+Designed with higher security in mind for public networks, like Wi-Fi hotspots, coffee shops, airports, hotels, or stores
To view detailed settings for each profile, right-click the top-level **Windows Defender Firewall with Advanced Security** node in the left pane and then select **Properties**.
diff --git a/windows/security/operating-system-security/network-security/windows-firewall/images/domain-network.svg b/windows/security/operating-system-security/network-security/windows-firewall/images/domain-network.svg
new file mode 100644
index 0000000000..83a88e6703
--- /dev/null
+++ b/windows/security/operating-system-security/network-security/windows-firewall/images/domain-network.svg
@@ -0,0 +1,3 @@
+
diff --git a/windows/security/operating-system-security/network-security/windows-firewall/images/private-network.svg b/windows/security/operating-system-security/network-security/windows-firewall/images/private-network.svg
new file mode 100644
index 0000000000..75dffe9ea7
--- /dev/null
+++ b/windows/security/operating-system-security/network-security/windows-firewall/images/private-network.svg
@@ -0,0 +1,3 @@
+
diff --git a/windows/security/operating-system-security/network-security/windows-firewall/images/public-network.svg b/windows/security/operating-system-security/network-security/windows-firewall/images/public-network.svg
new file mode 100644
index 0000000000..fb0da7408a
--- /dev/null
+++ b/windows/security/operating-system-security/network-security/windows-firewall/images/public-network.svg
@@ -0,0 +1,3 @@
+