diff --git a/docs/infrastructure_and_maintenance/cache/http_cache/fastly.md b/docs/infrastructure_and_maintenance/cache/http_cache/fastly.md
index bfa68e6e94..db558d3235 100644
--- a/docs/infrastructure_and_maintenance/cache/http_cache/fastly.md
+++ b/docs/infrastructure_and_maintenance/cache/http_cache/fastly.md
@@ -462,6 +462,11 @@ if (fastly.ff.visits_this_service == 0 && req.restarts == 0) {
     error 401 "Restricted";
   }
 }
+
+# Unsetting req.http.Authorization to avoid reaching "return(pass)" in vcl_recv for the first ESI request
+if (req.is_esi_subreq) {
+    unset req.http.Authorization;
+}
 ```
 
 To enable basic-auth for one domain only, alter `snippet_basic_auth_recv.vcl`: