diff --git a/en/azure/cdnprofiles/detect-insecure-custom-origin.md b/en/azure/cdnprofiles/detect-insecure-custom-origin.md
index e8c93e553..44c1ff730 100644
--- a/en/azure/cdnprofiles/detect-insecure-custom-origin.md
+++ b/en/azure/cdnprofiles/detect-insecure-custom-origin.md
@@ -15,5 +15,13 @@
 | **Recommended Action** | Enable HTTPS and disable HTTP for each custom origin endpoint for each CDN profile. |
 
 ## Detailed Remediation Steps
-
-
+1. Log into the Microsoft Azure Management Console.
+2. Select the "Search resources, services, and docs" option at the top and search for CDN. Select "Front Door and CDN profiles".</br> <img src="/resources/azure/cdnprofiles/detect-insecure-custom-origin/step2.png"/>
+3. On the "Front Door and CDN profiles" page, click on the "Name" link to access the configuration changes.</br> <img src="/resources/azure/cdnprofiles/detect-insecure-custom-origin/step3.png"/>
+4. In the CDN details pane that opens, click on the "Endpoints" link under "Properties".</br> <img src="/resources/azure/cdnprofiles/detect-insecure-custom-origin/step4.png"/>
+5. On the endpoint management page that opens, click on "default-route" under "Routes" column to load the route configuration page.</br> <img src="/resources/azure/cdnprofiles/detect-insecure-custom-origin/step5.png"/>
+6. On the "Update route" page, check the value of "Accepted protocols" dropdown. If it is set to "HTTP only" or "HTTP and HTTPS" then the endpoint allows insecure traffic. This is a security threat.</br> <img src="/resources/azure/cdnprofiles/detect-insecure-custom-origin/step6.png"/>
+7. Click on the "Accepted protocols" dropdown and select "HTTPS only". This will configure the endpoint to accept only secure traffic.
+8. Ensure that the checkbox for "Redirect" is selected to "Redirect all traffic to use HTTPS".</br> <img src="/resources/azure/cdnprofiles/detect-insecure-custom-origin/step7.png"/>
+9. Click "Update" at the bottom of the page to save the changes.
+10. Repeat steps 4 - 9 for all other CDN endpoints.
diff --git a/resources/azure/cdnprofiles/detect-insecure-custom-origin/step2.png b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step2.png
new file mode 100644
index 000000000..773ce0c71
Binary files /dev/null and b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step2.png differ
diff --git a/resources/azure/cdnprofiles/detect-insecure-custom-origin/step3.png b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step3.png
new file mode 100644
index 000000000..39e2dd2cf
Binary files /dev/null and b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step3.png differ
diff --git a/resources/azure/cdnprofiles/detect-insecure-custom-origin/step4.png b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step4.png
new file mode 100644
index 000000000..12abbdaee
Binary files /dev/null and b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step4.png differ
diff --git a/resources/azure/cdnprofiles/detect-insecure-custom-origin/step5.png b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step5.png
new file mode 100644
index 000000000..bbcc9f288
Binary files /dev/null and b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step5.png differ
diff --git a/resources/azure/cdnprofiles/detect-insecure-custom-origin/step6.png b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step6.png
new file mode 100644
index 000000000..3a0dd747e
Binary files /dev/null and b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step6.png differ
diff --git a/resources/azure/cdnprofiles/detect-insecure-custom-origin/step7.png b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step7.png
new file mode 100644
index 000000000..0160c6c28
Binary files /dev/null and b/resources/azure/cdnprofiles/detect-insecure-custom-origin/step7.png differ