formatting

Author: vhorne

articles/firewall/firewall-faq.yml

@@ -192,7 +192,8 @@ sections:
           If your configuration requires forced tunneling to an on-premises network and you can determine the target IP prefixes for your Internet destinations, you can configure these ranges with the on-premises network as the next hop via a user defined route on the AzureFirewallSubnet. Or, you can use BGP to define these routes.
 
       - question: Are there any firewall resource group restrictions?
-        answer: Yes. 
+        answer: |
+          Yes. 
           - The firewall and VNet must be in the same resource group.
           - The public IP address can be in any resource group.
           - The firewall, VNet, and the public IP address all must be in the same subscription.