initial draft

Author: johnmarco

articles/openshift/concepts-egress-lockdown.md

@@ -30,7 +30,7 @@ A well-known subset of domains (that the Azure Red Hat OpenShift clusters need t
 
 ## Enable egress lockdown
 
-In order to function, egress lock down relies on the Server Name Indication (SNI) extension to the Transport Layer Security (TLS). All customer workloads that communicate with the well-known subset of domains must have SNI enabled. 
+In order to function, egress lockdown relies on the Server Name Indication (SNI) extension to the Transport Layer Security (TLS). All customer workloads that communicate with the well-known subset of domains must have SNI enabled. 
 
 Egress lockdown is enabled by default for new cluster creation. However, to enable egress lockdown on existing clusters, you must have SNI enabled on the customer workloads. To enable egress lockdown on your existing clusters, submit a support case to either [Microsoft Support](https://support.microsoft.com) or [Red Hat Support](https://www.redhat.com/en/services/support).
 

articles/openshift/howto-restrict-egress.md

@@ -6,12 +6,16 @@ ms.author: joharder
 ms.service: azure-redhat-openshift
 ms.custom: devx-track-azurecli
 ms.topic: article
-ms.date: 02/16/2023
+ms.date: 04/03/2023
 ---
 # Control egress traffic for your Azure Red Hat OpenShift (ARO) cluster
 
 This article provides the necessary details that allow you to secure outbound traffic from your Azure Red Hat OpenShift cluster (ARO). With the release of the [Egress Lockdown Feature](./concepts-egress-lockdown.md), all of the required connections for a private cluster are proxied through the service. There are additional destinations that you may want to allow to use features such as Operator Hub, or Red Hat telemetry.  An [example](#private-aro-cluster-setup) is be provided at the end showing how to configure these requirements with Azure Firewall. Keep in mind, you can apply this information to Azure Firewall or to any outbound restriction method or appliance.
 
+> [!IMPORTANT]
+> Do not attempt these instructions on older ARO clusters if those clusters don't have the Egress Lockdown feature enabled. To enable the Egress Lockdown feature on older ARO clusters, see [Enable Egress Lockdown](./concepts-egress-lockdown.md#enable-egress-lockdown).
+
+
 ## Before you begin
 
 This article assumes that you're creating a new cluster. If you need a basic ARO cluster, see the [ARO quickstart](./tutorial-create-cluster.md).