Added doc link to overview and fixed numbering in MFA article.

Author: Heidilohr

articles/virtual-desktop/overview.md

@@ -98,7 +98,7 @@ The Azure virtual machines you create for Windows Virtual Desktop must have acce
 >[!IMPORTANT]
 >We recommend you use the service tags instead of URLs in most cases to prevent service issues. Unblocking these URLs is essential for a reliable Windows Virtual Desktop deployment. Blocking access to these URLs is unsupported and will affect service functionality. These URLs only correspond to Windows Virtual Desktop sites and resources, and don't include URLs for other services like Azure Active Directory.
 >
->Windows Virtual Desktop now supports the FQDN tag.
+>Windows Virtual Desktop now supports the FQDN tag. For more information, see [Use Azure Firewall to protect Window Virtual Desktop deployments](../firewall/protect-windows-virtual-desktop.md).
 
 The following table lists optional URLs that your Azure virtual machines can have access to:
 

articles/virtual-desktop/set-up-mfa.md

@@ -34,21 +34,21 @@ Here's what you'll need to get started:
 This section will show you how to create a Conditional Access policy that requires multi-factor authentication when connecting to Windows Virtual Desktop.
 
 1. Sign in to the **Azure portal** as a global administrator, security administrator, or Conditional Access administrator.
-1. Browse to **Azure Active Directory** > **Security** > **Conditional Access**.
-1. Select **New policy**.
-1. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.
-1. Under **Assignments**, select **Users and groups**.
+2. Browse to **Azure Active Directory** > **Security** > **Conditional Access**.
+3. Select **New policy**.
+4. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.
+5. Under **Assignments**, select **Users and groups**.
    - Under **Include**, select **Select users and groups** > **Users and groups** > Choose the group created in the prerequisites stage.
    - Select **Done**.
-1. Under **Cloud apps or actions** > **Include**, select **Select apps**.
+6. Under **Cloud apps or actions** > **Include**, select **Select apps**.
    - Choose **Windows Virtual Desktop**, then **Select**, and then then **Done**.
 
      ![A screenshot of the Cloud apps or actions page. The Windows Virtual Desktop and Windows Virtual Desktop Client apps are highlighted in red.](media/cloud-apps-enterprise.png)
 
-2. Under **Access controls** > **Grant**, select **Grant access**, **Require multi-factor authentication**, and then **Select**.
-3. Under **Access controls** > **Session**, select **Sign-in frequency**, set the value to **1** and the unit to **Hours**, and then select **Select**.
-4. Confirm your settings and set **Enable policy** to **On**.
-5. Select **Create** to enable your policy.
+7. Under **Access controls** > **Grant**, select **Grant access**, **Require multi-factor authentication**, and then **Select**.
+8. Under **Access controls** > **Session**, select **Sign-in frequency**, set the value to **1** and the unit to **Hours**, and then select **Select**.
+9. Confirm your settings and set **Enable policy** to **On**.
+10. Select **Create** to enable your policy.
 
 ## Next steps