update network security doc

Author: Charlie-Boyer

docs/hub/enterprise-hub-network-security.md

@@ -18,47 +18,25 @@ You can set multiple ranges, one per line.
 
 ## Higher Hub rate limits
 
-Apply for higher rate-limits for your organization. 
+Most of the actions on the Hub have limits, for example, users are limited to creating a certain number of repositories per day. 
+Once your IP ranges are set, enabling this option lets your organization request the highest usage limits for members connecting from those ranges. This also enables the highest HTTP rate limits on the Hub API, to unlock large volumes of model or dataset downloads.
 
-Most of the actions on the Hub have limits, for example, users are limited to creating a certain number of repositories per day. This option allows your organization to apply for higher limits for your organization members. This also enables higher HTTP rate limits on the Hub API, to unlock large volumes of model or dataset downloads.
-
-To activate this option:
-
-1. Toggle on the "Higher Hub rate limits" option
+For more information about rate limits, see the [Hub Rate limits](./rate-limits) documentation.
 
 <div class="flex justify-center">
 <img class="block dark:hidden" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/network-sec-rate-limit.png" alt="Screenshot of the toggle to enable High rate-limits."/>
 <img class="hidden dark:block" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/dark-network-sec-rate-limit.png" alt="Screenshot of the toggle to enable High rate-limits."/>
 </div>
 
-You need to have a valid Enterprise Plus subscription for this option to take effect.
-
-2. Ensure the Organization IP Ranges are defined 
-
-Once defined, higher rate limits will apply to members of your organization whose IPs match the defined ranges. 
-
 
 ## Restrict organization access to your IP ranges only
 
-This option restricts access to your organization's resources to only those coming from your defined IP ranges. No one can access your organization resources outside your IP ranges. The rules also apply to access tokens.
-
-To activate this option:
-
-1. Toggle on the "Restrict organization access to your IP ranges only" option
-
-<div class="flex justify-center">
-<img class="block dark:hidden" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/network-sec-enforce-auth.png" alt="Screenshot of the toggle to restrict organization access to IP ranges."/>
-<img class="hidden dark:block" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/dark-network-sec-enforce-auth.png" alt="Screenshot of the toggle to restrict organization access to IP ranges."/>
-</div>
-
-You need to have a valid Enterprise Plus subscription for this option to take effect.
-
-2. Ensure the Organization IP Ranges are defined 
+This option restricts access to your organization's resources to only those coming from your defined IP ranges. No one can access your organization resources outside your IP ranges. The rules also apply to access tokens. When enabled, this option unlocks additional nested security settings below.
 
 
 ### Require login for users in your IP ranges
 
-When this nested option is enabled, anyone visiting Hugging Face from your corporate network must be logged in and belong to your organization (requires a manual verification when IP ranges have changed). If enabled, you can optionally define a content access policy.
+When this option is enabled, anyone visiting Hugging Face from your corporate network must be logged in and belong to your organization (requires a manual verification when IP ranges have changed). If enabled, you can optionally define a content access policy.
 
 All public pages will show the following message if access is unauthenticated:
 
@@ -67,12 +45,11 @@ All public pages will show the following message if access is unauthenticated:
 <img class="hidden dark:block" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/dark-network-sec-restricted-url.png" alt="Screenshot of restricted pages on the Hub."/>
 </div>
 
-1. Toggle on the "Require login for users in your IP ranges" option (this option appears when "Restrict organization access to your IP ranges only" is enabled)
 
 
 ### Content Access Policy 
 
-You can also define a fine-grained Content Access Policy by blocking certain sections of the Hugging Face Hub. 
+Define a fine-grained Content Access Policy by blocking certain sections of the Hugging Face Hub. 
 
 For example, you can block your organization's members from accessing Spaces by adding `/spaces/*` to the blocked URLs. When users of your organization navigate to a page that matches the URL pattern, they'll be presented the following page: