diff --git a/docs/pages/setup/reference/networking.mdx b/docs/pages/setup/reference/networking.mdx
index 7a14a26df53ed..26ac938797ada 100644
--- a/docs/pages/setup/reference/networking.mdx
+++ b/docs/pages/setup/reference/networking.mdx
@@ -125,7 +125,8 @@ Read more in our [TLS Routing](../../architecture/tls-routing.mdx) guide.
 | - | - | - |
 | 443 | Proxy | In TLS Routing mode, the Proxy handles all protocols, including Web UI, HTTPS, Kubernetes, SSH, and all databases on a single port. |
 | 3022 | Node | SSH port. This is Teleport's equivalent of port `#22` for SSH. Only used when Teleport Node is replacing SSH.|
-| 3025 | Auth | SSH port used by the Auth Service to serve its API to other Nodes in a cluster.|
+| 3025 | Auth | TLS port used by the Auth Service to serve its API to other Nodes in a cluster.|
+| 3028 | Desktop | When using Desktop Service `windows_desktop_service.listen_addr` |
 
 ### Ports without TLS routing
 
@@ -137,7 +138,7 @@ In those cases, they can set up separate listeners in the config file.
 | 3022 | Node | SSH port. This is Teleport's equivalent of port `#22` for SSH. |
 | 3023 | Proxy | SSH port clients connect to. The Proxy Service will forward this connection to port `#3022` on the destination Node. |
 | 3024 | Proxy | SSH port used to create "reverse SSH tunnels" from behind-firewall environments into a trusted proxy server. |
-| 3025 | Auth | SSH port used by the Auth Service to serve its API to other Nodes in a cluster. |
+| 3025 | Auth | TLS port used by the Auth Service to serve its API to other Nodes in a cluster. |
 | 3080 or 443 | Proxy | HTTPS connection to authenticate `tsh` users into the cluster. The same connection is used to serve a Web UI. |
 | 3026 | Kubernetes | HTTPS Kubernetes proxy `proxy_service.kube_listen_addr` |
 | 3027 | Kubernetes | Kubernetes Service `kubernetes_service.listen_addr` |