update toc

Author: duongau

articles/firewall/toc.yml

@@ -1,174 +1,184 @@
 items:
 - name: Azure Firewall documentation
   href: index.yml
-- name: Overview
+- name: Get started
   items:
   - name: What is Azure Firewall?
     href: overview.md
   - name: Well-Architected review of Azure Firewall
     href: /azure/architecture/framework/services/networking/azure-firewall?toc=/azure/firewall/toc.json&bc=/azure/firewall/breadcrumb/toc.json
-- name: Quickstarts
-  expanded: true
+  - name: SKU comparison
+    items:
+    - name: Overview
+      href: choose-firewall-sku.md
+    - name: Basic
+      href: basic-features.md
+    - name: Standard
+      href: features.md
+    - name: Premium
+      href: premium-features.md
+    - name: Preview features
+      href: firewall-preview.md
+- name: Design & achitecture
   items:
-  - name: Deploy with IP Groups - Bicep
-    displayName: Resource Manager,arm,template
-    href: quick-create-ipgroup-bicep.md
-  - name: Deploy with IP Groups - Terraform
-    href: quick-create-ipgroup-terraform.md
-  - name: Deploy with IP Groups - ARM template
-    displayName: Resource Manager
-    href: quick-create-ipgroup-template.md
-  - name: Deploy with multiple addresses - Bicep
-    displayName: Resource Manager,ARM,template
-    href: quick-create-multiple-ip-bicep.md
-  - name: Deploy with multiple addresses - Terraform
-    href: quick-create-multiple-ip-terraform.md
-  - name: Deploy with multiple addresses - ARM template
-    displayName: Resource Manager
-    href: quick-create-multiple-ip-template.md
-  - name: Deploy with Availability Zones - Bicep
-    displayName: ARM, Resource Manager, Template
-    href: deploy-bicep.md
-  - name: Deploy with Availability Zones - Terraform
-    href: deploy-terraform.md
-  - name: Deploy with Availability Zones - ARM template
-    displayName: Resource Manager
-    href: deploy-template.md
-- name: Tutorials
+  - name: Policy 
+    items:
+    - name: Policy rule sets
+      href: policy-rule-sets.md
+    - name: Policy Analytics
+      href: policy-analytics.md
+  - name: Infrastructure FQDNs
+    href: infrastructure-fqdns.md
+  - name: IDPS signature rule categories
+    href: idps-signature-categories.md
+  - name: Web categories
+    href: web-categories.md
+  - name: Rule processing logic
+    href: rule-processing.md
+  - name: Forced tunneling
+    href: forced-tunneling.md
+  - name: Management NIC
+    href: management-nic.md
+  - name: Certifications
+    href: compliance-certifications.md
+  - name: FTP support
+    href: ftp-support.md
+  - name: Performance
+    href: firewall-performance.md
+  - name: TCP idle timeout behavior
+    href: long-running-sessions.md
+  - name: Explicit Proxy
+    href: explicit-proxy.md
+  - name: Multi hub and spoke
+    href: firewall-multi-hub-spoke.md
+  - name: Central management
+    href: central-management.md
+  - name: Integrate with load balancer
+    href: integrate-lb.md
+- name: Deploy
   items:
-  - name: Deploy and configure
-    href: tutorial-firewall-deploy-portal-policy.md
-  - name: Deploy in hybrid network
-    href: tutorial-hybrid-portal-policy.md
-  - name: Filter inbound traffic with DNAT
+  - name: Firewall Basic
+    href: deploy-firewall-basic-portal.md
+  - name: Firewall Standard
+    items:
+    - name: Portal
+      href: tutorial-firewall-deploy-portal-policy.md
+    - name: PowerShell
+      href: deploy-ps.md
+    - name: With Azure CLI
+      href: deploy-cli.md
+  - name: Firewall Premium
+    items:
+    - name: Overview
+      href: premium-portal.md
+    - name: Portal
+      href: premium-deploy.md
+    - name: Cerficates
+      href: premium-certificates.md
+    - name: Enterprise CA Certificates
+      href: premium-deploy-certificates-enterprise-ca.md
+  - name: To a hybrid Network
+    items:
+    - name: Portal
+      href: tutorial-firewall-deploy-portal-policy.md
+    - name: PowerShell
+      href: tutorial-hybrid-ps.md
+  - name: Firewall with inbound DNAT rules
     href: tutorial-firewall-dnat-policy.md
-  - name: Deploy firewall with DDoS protection
+  - name: Firewall with DDoS protection
     href: tutorial-protect-firewall.md
   - name: Integrate NAT gateway with Azure Firewall
     href: ../virtual-network/nat-gateway/tutorial-hub-spoke-nat-firewall.md?toc=%2fazure%2ffirewall%2ftoc.json
-- name: Concepts
-  items:
-    - name: Versions
-      items:
-      - name: Basic
-        items:
-        - name: Azure Firewall Basic features
-          href: basic-features.md
-      - name: Standard
-        items:
-        - name: Azure Firewall Standard features
-          href: features.md
-      - name: Premium
-        items:
-        - name: Azure Firewall Premium features
-          href: premium-features.md
-        - name: Azure Firewall Premium in the portal
-          href: premium-portal.md
-        - name: Azure Firewall Premium certificates
-          href: premium-certificates.md
-        - name: IDPS signature rule categories
-          href: idps-signature-categories.md
-
-      - name: Choose an Azure Firewall version
-        href: choose-firewall-sku.md
-    - name: Preview
-      items:
-      - name: Azure Firewall preview features
-        href: firewall-preview.md
-    - name: Tags
-      items:
-      - name: FQDN tags
-        href: fqdn-tags.md
-      - name: Service tags
-        href: service-tags.md
-    - name: Logs and metrics
-      items:
-      - name: Monitor Azure Firewall
-        href: monitor-firewall.md
-    - name: Policy
-      items:
-      - name: Policy rule sets
-        href: policy-rule-sets.md
-      - name: Policy Analytics
-        href: policy-analytics.md
-    - name: Roles and permissions
-      href: roles-permissions.md  
-    - name: Azure Firewall web categories
-      href: web-categories.md
-    - name: Infrastructure FQDNs
-      href: infrastructure-fqdns.md
-    - name: Threat intelligence
-      href: threat-intel.md
-    - name: Rule processing logic
-      href: rule-processing.md
-    - name: IP Groups
+  - name: Deploy with IP Groups
+    items:
+    - name: Overview
       href: ip-groups.md
-    - name: Forced tunneling
-      href: forced-tunneling.md
-    - name: Management NIC
-      href: management-nic.md
-    - name: Certifications
-      href: compliance-certifications.md
-    - name: Central management
-      href: central-management.md
-    - name: Remote work support
-      href: remote-work-support.md
-    - name: FQDN in network rules
-      href: fqdn-filtering-network-rules.md
-    - name: DNS Proxy details
-      href: dns-details.md
-    - name: Security baseline
-      href: /security/benchmark/azure/baselines/firewall-security-baseline?toc=/azure/firewall/toc.json
-    - name: FTP support
-      href: ftp-support.md
-    - name: Performance
-      href: firewall-performance.md
-    - name: TCP idle timeout behavior
-      href: long-running-sessions.md
-    - name: Easy upgrade/downgrade
-      href: easy-upgrade.md
-    - name: Explicit Proxy
-      href: explicit-proxy.md
-    - name: Multi hub and spoke
-      href: firewall-multi-hub-spoke.md
-    - name: Azure Firewall with Microsoft Sentinel
-      href: firewall-sentinel-overview.md
-    - name: Best practices for performance
-      href: firewall-best-practices.md
-    - name: Microsoft Copilot for Security
-      href: firewall-copilot.md
-- name: How-to guides
+    - name: Portal, PowerShell, and CLI
+      href: create-ip-group.md
+    - name: Bicep
+      href: quick-create-ipgroup-bicep.md
+    - name: Terraform
+      href: quick-create-ipgroup-terraform.md
+    - name: ARM template
+      href: quick-create-ipgroup-template.md
+  - name: Deploy with multiple addresses
+    items:
+    - name: PowerShell
+      href: deploy-multi-public-ip-powershell.md
+    - name: Bicep
+      href: quick-create-multiple-ip-bicep.md
+    - name: Terraform
+      href: quick-create-multiple-ip-terraform.md
+    - name: ARM template
+      href: quick-create-multiple-ip-template.md
+  - name: Deploy with Availability zones
+    items:
+    - name: Deploy with Availability Zones
+      href: deploy-availability-zone-powershell.md
+    - name: Bicep
+      href: deploy-bicep.md
+    - name: Terraform
+      href: deploy-terraform.md
+    - name: ARM template
+      href: deploy-template.md
+    - name: Secured hub customer public IP
+      href: secured-hub-customer-public-ip.md
+  - name: Azure policy
+    items:
+    - name: Portal
+      href: firewall-azure-policy.md
+    - name: CLI
+      href: deploy-ps-policy.md
+  - name: Classic firewall rules
+    items:
+    - name: Deploy and configure - classic
+      href: tutorial-firewall-deploy-portal.md
+    - name: Deploy in hybrid network - classic
+      href: tutorial-hybrid-portal.md
+    - name: Filter inbound traffic with DNAT - classic
+      href: tutorial-firewall-dnat.md
+  - name: Connectivity to Azure Storage with SFTP
+    href: firewall-sftp.md
+  - name: Backup Azure Firewall
+    href: https://techcommunity.microsoft.com/t5/azure-network-security-blog/backup-azure-firewall-and-azure-firewall-policy-with-logic-apps/ba-p/3613928
+- name: Configure
   items:
-  - name: Deploy
+  - name: Add or modify rules using PowerShell
+    href: deploy-rules-powershell.md
+  - name: DNS proxy
+    items:
+    - name: Overview
+      href: dns-details.md
+    - name: DNS proxy settings
+      href: dns-settings.md
+  - name: Tags
     items:
-     - name: Deploy and configure - classic
-       href: tutorial-firewall-deploy-portal.md
-     - name: Deploy in hybrid network - classic
-       href: tutorial-hybrid-portal.md
-     - name: Filter inbound traffic with DNAT - classic
-       href: tutorial-firewall-dnat.md
-     - name: Deploy Firewall Basic
-       href: deploy-firewall-basic-portal-policy.md
-     - name: Deploy using Azure PowerShell
-       href: deploy-ps.md
-     - name: Deploy policy using Azure PowerShell
-       href: deploy-ps-policy.md
-     - name: Deploy in hybrid network - PowerShell
-       href: tutorial-hybrid-ps.md
-     - name: Deploy using Azure CLI
-       href: deploy-cli.md
-     - name: Deploy with multiple public IP
-       href: deploy-multi-public-ip-powershell.md
-     - name: Deploy with Availability Zones
-       href: deploy-availability-zone-powershell.md
-     - name: Deploy and configure Firewall Premium
-       href: premium-deploy.md
-     - name: Deploy Enterprise CA Certificates for Premium
-       href: premium-deploy-certificates-enterprise-ca.md
-     - name: Use Azure Policy
-       href: firewall-azure-policy.md
-     - name: Secured hub customer public IP
-       href: secured-hub-customer-public-ip.md
+    - name: FQDN tags
+      href: fqdn-tags.md
+    - name: Service tags
+      href: service-tags.md
+    - name: Scale outbound SNAT ports
+      href: integrate-with-nat-gateway.md
+  - name: Application rules with SQL FQDNs
+    href: sql-fqdn-filtering.md
+  - name: SNAT private ranges
+    href: snat-private-range.md
+- name: Migration and upgrades
+  items:
+  - name: Migrate to Azure Firewall Premium
+    href: premium-migrate.md
+  - name: Migrate to Premium using Terraform
+    href: /azure/developer/terraform/firewall-upgrade-premium?toc=/azure/firewall/toc.json&bc=/azure/firewall/breadcrumb/toc.json
+  - name: Easy upgrade/downgrade
+    href: easy-upgrade.md
+- name: Security
+  items:
+  - name: Security baseline
+    href: /security/benchmark/azure/baselines/firewall-security-baseline?toc=/azure/firewall/toc.json
+  - name: Roles and permissions
+    href: roles-permissions.md
+  - name: Microsoft Copilot for Security
+    href: firewall-copilot.md
   - name: Protect
     items:
     - name: Protect Azure Virtual Desktop
@@ -177,40 +187,26 @@ items:
       href: protect-azure-kubernetes-service.md
     - name: Protect Office 365
       href: protect-office-365.md
+    - name: Azure Firewall with Microsoft Sentinel
+      href: firewall-sentinel-overview.md
     - name: Detect malware with Microsoft Sentinel
       href: detect-malware-with-sentinel.md
-  - name: Migrate
-    items:
-    - name: Migrate to Azure Firewall Premium
-      href: premium-migrate.md
-    - name: Migrate to Premium using Terraform
-      href: /azure/developer/terraform/firewall-upgrade-premium?toc=/azure/firewall/toc.json&bc=/azure/firewall/breadcrumb/toc.json
-  - name: Relocate
-    items:
-    - name: Relocate to another region
-      href: ../operational-excellence/relocation-firewall.md?toc=/azure/firewall/toc.json&bc=/azure/firewall/breadcrumb/toc.json
-  - name: Monitor
+- name: Operational excellence
+  items:
+  - name: Monitoring
     items:
-    - name: Azure Firewall Workbook
+    - name: Logs and metrics
+      href: monitor-firewall.md
+    - name: Azure Firewall Workbooks
       href: firewall-workbook.md
-  - name: Scale Outbound SNAT Ports
-    href: integrate-with-nat-gateway.md
-  - name: Add or modify rules using PowerShell
-    href: deploy-rules-powershell.md
-  - name: Backup Azure Firewall
-    href: https://techcommunity.microsoft.com/t5/azure-network-security-blog/backup-azure-firewall-and-azure-firewall-policy-with-logic-apps/ba-p/3613928
-  - name: Connect to Azure Storage via SFTP
-    href: firewall-sftp.md
-  - name: Integrate with load balancer
-    href: integrate-lb.md
-  - name: Application rules with SQL FQDNs
-    href: sql-fqdn-filtering.md
-  - name: SNAT private ranges
-    href: snat-private-range.md
-  - name: Create IP Groups
-    href: create-ip-group.md
-  - name: DNS settings
-    href: dns-settings.md
+  - name: Threat intelligence
+    href: threat-intel.md
+  - name: Best practices for performance
+    href: firewall-best-practices.md
+  - name: Relocate to another region
+    href: ../operational-excellence/relocation-firewall.md?toc=/azure/firewall/toc.json&bc=/azure/firewall/breadcrumb/toc.json
+  - name: Remote work support
+    href: remote-work-support.md
 - name: Reference
   items:
   - name: Azure CLI