minor fix

Author: madsd

articles/app-service/environment/integrate-with-application-gateway.md

@@ -36,7 +36,7 @@ To integrate your application gateway with your ILB App Service Environment, you
 * A public DNS name for your application gateway.
 * If you need to use TLS encryption to the application gateway, a valid public certificate that's used to bind to your application gateway is required.
 
-### ILB App Service environment
+### ILB App Service Environment
 
 For details on how to create an ILB App Service Environment, see [Create an App Service Environment in the Azure portal](./creation.md) and [Create an App Service Environment with Azure Resource Manager template](./create-from-template.md).
 
@@ -83,7 +83,7 @@ The certificate file should have a private key and save in `.pfx` format. The ce
 
 For the basic application gateway creation, refer to [Tutorial: Create an application gateway with a Web Application Firewall using the Azure portal](../../web-application-firewall/ag/application-gateway-web-application-firewall-portal.md).
 
-In this tutorial, we use Azure portal to create an application gateway with ILB App Service environment.
+In this tutorial, we use Azure portal to create an application gateway with ILB App Service Environment.
 
 In the Azure portal, select **New** > **Network** > **Application Gateway** to create an application gateway.
 

articles/app-service/overview-app-gateway-integration.md

@@ -66,6 +66,8 @@ To isolate traffic to an individual web app, you need to use IP-based access res
 
 An external App Service Environment has a public-facing load balancer like multitenant App Service apps. Service endpoints don't work for an App Service Environment. With App Service Environment you can use IP-based access restrictions by using the public IP address of the application gateway. To create an external App Service Environment by using the Azure portal, you can follow [this quickstart](./environment/creation.md).
 
+You can also [add private endpoints to apps hosted on an external App Service Environment](./environment/configure-network-settings.md#allow-new-private-endpoint-connections).
+
 ## Considerations for a Kudu/SCM site
 
 The SCM site, also known as Kudu, is an admin site that exists for every web app. It isn't possible to use reverse proxy for the SCM site. You most likely also want to lock it down to individual IP addresses or a specific subnet.