diff --git a/content/en/docs/ops/deployment/requirements/index.md b/content/en/docs/ops/deployment/requirements/index.md
index 7c6ec82366..96339be4af 100644
--- a/content/en/docs/ops/deployment/requirements/index.md
+++ b/content/en/docs/ops/deployment/requirements/index.md
@@ -90,6 +90,10 @@ To be part of a mesh, Kubernetes pods must satisfy the following requirements:
 
 The following ports and protocols are used by the Istio sidecar proxy (Envoy).
 
+{{< warning >}}
+To avoid port conflicts with sidecars, applications should not use any of the ports used by Envoy.
+{{< /warning >}}
+
 | Port | Protocol | Description | Pod-internal only |
 |----|----|----|----|
 | 15000 | TCP | Envoy admin port (commands/diagnostics) | Yes |
@@ -110,8 +114,6 @@ The following ports and protocols are used by the Istio control plane (istiod).
 | 443 | HTTPS | Webhooks | No |
 | 15014 | HTTP | Control plane monitoring | No |
 
-To avoid port conflicts with sidecars, applications should not use any of the ports used by Envoy.
-
 ## Server First Protocols
 
 Some protocols are "Server First" protocols, which means the server will send the first bytes. This may have an impact on