diff --git a/content/cloudflare-one/policies/gateway/network-policies/ssh-logging.md b/content/cloudflare-one/policies/gateway/network-policies/ssh-logging.md
index b103aabbc0e925..a848d2968886fd 100644
--- a/content/cloudflare-one/policies/gateway/network-policies/ssh-logging.md
+++ b/content/cloudflare-one/policies/gateway/network-policies/ssh-logging.md
@@ -69,7 +69,9 @@ $ cat /etc/ssh/sshd_config
 
 2. In the **Network** tab, create a new network policy.
 
-3. Name the policy and specify the [Destination IP](/cloudflare-one/policies/gateway/network-policies/#destination-ip) for your origin server.
+3. Name the policy and specify the [Destination IP](/cloudflare-one/policies/gateway/network-policies/#destination-ip) for your origin server. 
+
+   You can enter either a public or private IP. To use a private IP, refer to [Connect private networks](/cloudflare-one/connections/connect-networks/private-net/connect-private-networks/).
 
 4. Add any other conditions to your policy. If a user does not meet the criteria, they will be blocked by default.