Merge pull request #274414 from asudbring/vnet-encryption-patch

Added limitation to VNET encryption overview

Author: prmerger-automator[bot]

articles/virtual-network/virtual-network-encryption-overview.md

@@ -6,7 +6,7 @@ ms.service: virtual-network
 author: asudbring
 ms.author: allensu
 ms.topic: overview
-ms.date: 04/15/2024
+ms.date: 05/06/2024
 ms.custom: template-overview, references_regions
 # Customer intent: As a network administrator, I want to learn about encryption in Azure Virtual Network so that I can secure my network traffic.
 
@@ -51,7 +51,9 @@ Azure Virtual Network encryption has the following limitations:
 
 - In scenarios where a PaaS is involved, the virtual machine where the PaaS is hosted dictates if virtual network encryption is supported. The virtual machine must meet the listed requirements. 
 
-- For Internal load balancer, all virtual machines behind the load balancer must be a supported virtual machine SKU. 
+- For Internal load balancer, all virtual machines behind the load balancer must be a supported virtual machine SKU.
+
+- **AllowUnencrypted** is the only supported enforcement at general availability. **DropUnencrypted** enforcement will be supported in the future.
 
 ## Next steps