diff --git a/content/en/docs/tasks/security/authentication/mutual-tls/index.md b/content/en/docs/tasks/security/authentication/mutual-tls/index.md
index c5809e93c1..f62b059938 100644
--- a/content/en/docs/tasks/security/authentication/mutual-tls/index.md
+++ b/content/en/docs/tasks/security/authentication/mutual-tls/index.md
@@ -93,8 +93,8 @@ In the following example output you can see that:
 * Istio has the `default` destination rule in the `istio-system` namespace.
 
 {{< text plain >}}
-HOST:PORT                                  STATUS     SERVER     CLIENT     AUTHN POLICY        DESTINATION RULE
-httpbin.default.svc.cluster.local:8000     OK         mTLS       mTLS       /default            istio-system/default
+HOST:PORT                                  STATUS     SERVER     CLIENT           AUTHN POLICY     DESTINATION RULE
+httpbin.default.svc.cluster.local:8000     OK         STRICT     ISTIO_MUTUAL     /default         istio-system/default
 {{< /text >}}
 
 The output shows:
diff --git a/content/en/faq/security/check-policy.md b/content/en/faq/security/check-policy.md
index f68d4b1939..07c208b1cc 100644
--- a/content/en/faq/security/check-policy.md
+++ b/content/en/faq/security/check-policy.md
@@ -7,8 +7,8 @@ The [`istioctl`](/docs/reference/commands/istioctl) command provides an option f
 
 {{< text bash >}}
 $ istioctl authn tls-check $CLIENT_POD httpbin.default.svc.cluster.local
-HOST:PORT                                  STATUS     SERVER     CLIENT     AUTHN POLICY        DESTINATION RULE
-httpbin.default.svc.cluster.local:8000     OK         mTLS       mTLS       /default            istio-system/default
+HOST:PORT                                  STATUS     SERVER     CLIENT           AUTHN POLICY     DESTINATION RULE
+httpbin.default.svc.cluster.local:8000     OK         STRICT     ISTIO_MUTUAL     /default         istio-system/default
 {{< /text >}}
 
 Where `$CLIENT_POD` is the ID of one of the client service's pods.