diff --git a/pages/vpc/faq.mdx b/pages/vpc/faq.mdx
index 620bee6dc7..82e580e680 100644
--- a/pages/vpc/faq.mdx
+++ b/pages/vpc/faq.mdx
@@ -54,7 +54,7 @@ Yes, use the [Network ACL feature](/vpc/reference-content/understanding-nacls/)
 NACLs are currently in Public Beta, and configurable only via the [VPC API](https://www.scaleway.com/en/developers/api/vpc/) and developer tools. This feature will be coming soon to the Scaleway console.
 </Message>
 
-## How are NACLs different from security groups?
+### How are NACLs different from security groups?
 
 [Security groups](/instances/how-to/use-security-groups/) filter **public** traffic on your Instances, whereas NACLs filter traffic to/from Private Networks only.
 
@@ -133,4 +133,4 @@ Nonetheless, you can also reserve specific IPs from a Private Network's CIDR blo
 
 For this purpose use the option of attaching a **custom resource** to a Private Network, specifying its MAC address. Full instructions for attaching custom resources are in the [Private Networks documentation](/vpc/how-to/attach-resources-to-pn#how-can-i-manage-ip-addresses-for-my-proxmox-virtual-machines-vms-on-elastic-metal-servers).
 
-You can also [reserve a private IP address](/ipam/how-to/reserve-ip/) with IPAM, and use this reserved address to attach a custom resource.
\ No newline at end of file
+You can also [reserve a private IP address](/ipam/how-to/reserve-ip/) with IPAM, and use this reserved address to attach a custom resource.