Update integrate-with-nat-gateway.md

Author: aimee-littleton

articles/firewall/integrate-with-nat-gateway.md

@@ -26,7 +26,7 @@ There’s no double NAT with this architecture. Azure Firewall instances send th
 > [!NOTE]
 > Deploying NAT gateway with a [zone redundant firewall](deploy-availability-zone-powershell.md) isn't recommended deployment option, as a single instance of NAT gateway doesn't support zonal redundant deployment at this time. 
 >
-> In addition, Azure NAT Gateway integration isn't currently supported in secured virtual hub network (vWAN) architectures. You must deploy using a hub virtual network architecture. For detailed guidance on integrating NAT gateway with Azure Firewall in a hub and spoke network architecture, refer to the [NAT gateway and Azure Firewall integration tutorial](../virtual-network/nat-gateway/tutorial-hub-spoke-nat-firewall.md). For more information about Azure Firewall architecture options, see [What are the Azure Firewall Manager architecture options?](../firewall-manager/vhubs-and-vnets.md).
+> In addition, Azure NAT Gateway isn't supported in the hub virtual network of a vWAN architecture. To use in a vWAN architecture, NAT Gateway must be configured directly to the spoke virtual networks associated with the secured virtual hub (vWAN). For detailed guidance on integrating NAT gateway with Azure Firewall in a hub and spoke network architecture, refer to the [NAT gateway and Azure Firewall integration tutorial](../virtual-network/nat-gateway/tutorial-hub-spoke-nat-firewall.md). For more information about Azure Firewall architecture options, see [What are the Azure Firewall Manager architecture options?](../firewall-manager/vhubs-and-vnets.md).
 
 ## Associate a NAT gateway with an Azure Firewall subnet - Azure PowerShell