[DOCS-12236] adding new neutral tags to Network Analytics page (#32041)

* adding new neutral tags

* Apply suggestions from Janine's review

Co-authored-by: Janine Chan <[email protected]>

---------

Co-authored-by: Janine Chan <[email protected]>

Author: git-thuerk-done

content/en/network_monitoring/cloud_network_monitoring/network_analytics.md

@@ -143,22 +143,80 @@ Neutral tags are tags that are not specific to a client or server, and instead a
 
 The following is the list of neutral tags available for use:
 
-| Tag                     | Description                                                                                   |
-|-------------------------|-----------------------------------------------------------------------------------------------|
-| `is_agent_traffic`      | Indicates if the traffic was generated by the Datadog Agent.                                  |
-| `tls_encrypted`         | Specifies if the connection is encrypted using TLS.                                           |
-| `tls_cipher_suite`      | Identifies the TLS cipher suite used (for example, `tls_ecdhe_rsa_with_aes_128_gcm_sha256`).          |
-| `tls_cipher_insecure`   | Indicates if the cipher used is considered secure.                                            |
-| `tls_version`           | The TLS version used (`tls_1.2` or `tls_1.3`).                                                |
-| `tls_client_version`    | The TLS versions supported by the client (`tls_1.2` or `tls_1.3`).                            |
-| `gateway_id`            | Unique identifier for the AWS gateway resource.                                               |
-| `gateway_type`          | Type of AWS gateway (Internet, NAT, or Transit).                                              |
-| `gateway_region`        | AWS region of the gateway (for example, `us-east-1`).                                                |
-| `gateway_availability-zone` | Availability zone hosting the gateway (for example, `us-east-1a`).                                |
-| `gateway_public_ip`     | Public IP address assigned to the NAT gateway.                                                |
-| `tgw_attachment_id`     | Unique identifier for the AWS Transit Gateway attachment.                                     |
-| `tgw_attachment_type`   | Type of Transit Gateway attachment (for example, VPC, VPN, Direct Connect).                          |
-| `vpc_endpoint_id`       | Unique identifier for the VPC endpoint.                                                       |
+<table>
+<thead>
+<tr>
+<th style="white-space: nowrap; width: 300px; min-width: 300px;">Tag</th>
+<th>Description</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td><code>gateway_availability-zone</code></td>
+<td>Availability zone hosting the gateway (for example, <code>us-east-1a</code>).</td>
+</tr>
+<tr>
+<td><code>gateway_id</code></td>
+<td>Unique identifier for the AWS gateway resource.</td>
+</tr>
+<tr>
+<td><code>gateway_public_ip</code></td>
+<td>Public IP address assigned to the NAT gateway.</td>
+</tr>
+<tr>
+<td><code>gateway_region</code></td>
+<td>AWS region of the gateway (for example, <code>us-east-1</code>).</td>
+</tr>
+<tr>
+<td><code>gateway_type</code></td>
+<td>Type of AWS gateway (internet, NAT, or Transit).</td>
+</tr>
+<tr>
+<td><code>intra_availability_zone</code></td>
+<td>Indicates whether network flows are within an availability zone (<code>true</code>), cross-availability zone (<code>false</code>), or undetermined (<code>unknown</code>). <strong>Note</strong>: Not applicable for Azure.</td>
+</tr>
+<tr>
+<td><code>intra_region</code></td>
+<td>Indicates whether network flows are within a region (<code>true</code>), cross-region (<code>false</code>), or undetermined (<code>unknown</code>).</td>
+</tr>
+<tr>
+<td><code>is_agent_traffic</code></td>
+<td>Indicates if the traffic was generated by the Datadog Agent.</td>
+</tr>
+<tr>
+<td><code>tgw_attachment_id</code></td>
+<td>Unique identifier for the AWS Transit Gateway attachment.</td>
+</tr>
+<tr>
+<td><code>tgw_attachment_type</code></td>
+<td>Type of Transit Gateway attachment (for example, VPC, VPN, Direct Connect).</td>
+</tr>
+<tr>
+<td><code>tls_cipher_insecure</code></td>
+<td>Indicates if the cipher used is considered secure.</td>
+</tr>
+<tr>
+<td><code>tls_cipher_suite</code></td>
+<td>Identifies the TLS cipher suite used (for example, <code>tls_ecdhe_rsa_with_aes_128_gcm_sha256</code>).</td>
+</tr>
+<tr>
+<td><code>tls_client_version</code></td>
+<td>The TLS version supported by the client (<code>tls_1.2</code> or <code>tls_1.3</code>).</td>
+</tr>
+<tr>
+<td><code>tls_encrypted</code></td>
+<td>Specifies if the connection is encrypted using TLS.</td>
+</tr>
+<tr>
+<td><code>tls_version</code></td>
+<td>The TLS version used (<code>tls_1.2</code> or <code>tls_1.3</code>).</td>
+</tr>
+<tr>
+<td><code>vpc_endpoint_id</code></td>
+<td>Unique identifier for the VPC endpoint.</td>
+</tr>
+</tbody>
+</table>
 
 ## Summary graphs