Updated support statement for cache storage acct

Author: sideeksh

articles/site-recovery/azure-to-azure-about-networking.md

@@ -118,7 +118,8 @@ You can create a network service endpoint in your virtual network for "Storage"
 - Select 'Microsoft.Storage' under 'Service' and the required subnets under 'Subnets' field and click 'Add'
 
 >[!NOTE]
->Do not restrict virtual network access to your storage accounts used for ASR. You should allow access from 'All networks'
+>If you are using firewall enabled cache storage account or target storage account, ensure you ['Allow trusted Microsoft services'](../storage/common/storage-network-security.md). Also, ensure that you allow access to at least one subnet of source Vnet.
+
 
 ### Forced tunneling
 
@@ -127,4 +128,4 @@ You can override Azure's default system route for the 0.0.0.0/0 address prefix w
 ## Next steps
 - Start protecting your workloads by [replicating Azure virtual machines](./azure-to-azure-quickstart.md).
 - Learn more about [IP address retention](site-recovery-retain-ip-azure-vm-failover.md) for Azure virtual machine failover.
-- Learn more about disaster recovery of [Azure virtual machines with ExpressRoute](azure-vm-disaster-recovery-with-expressroute.md).
+- Learn more about disaster recovery of [Azure virtual machines with ExpressRoute](azure-vm-disaster-recovery-with-expressroute.md).