diff --git a/articles/firewall-manager/vhubs-and-vnets.md b/articles/firewall-manager/vhubs-and-vnets.md
index eb290c0fe2dee..c4e17482c4f92 100644
--- a/articles/firewall-manager/vhubs-and-vnets.md
+++ b/articles/firewall-manager/vhubs-and-vnets.md
@@ -39,7 +39,7 @@ The following table compares these two architecture options and can help you dec
 |**Multiple security provider support**|Supported with manually configured forced tunneling to third-party firewalls|Automated support for two security providers: Azure Firewall for private traffic filtering and third-party for Internet filtering|
 |**Web Application Firewall on Application Gateway** |Supported in Virtual Network|Currently supported in spoke network|
 |**Network Virtual Appliance**|Supported in Virtual Network|Currently supported in spoke network|
-|**Azure DDoS Protection support**|Yes|No|
+|**Azure DDoS Protection support**|Yes|Yes (with a [customer-provided public IP address](../firewall/secured-hub-customer-public-ip.md))|
 
 ## Next steps