Update README.md

examples/common_cloudngfw/README.md

@@ -26,6 +26,8 @@ This design uses a Transit VNet. Application functions and resources are deploye
 a hub-and-spoke topology. The hub of the topology, or transit VNet, is the central point of connectivity for all inbound,
 outbound, east-west, and enterprise traffic. You integrate CNGFW with the transit VNet. Please see the [CNGFW design guide](https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/guides/securing-apps-with-cloud-ngfw-for-azure-design-guide).
 
+![Azure NGFW hub README diagrams - cngfw_vnet (1)](https://github.com/user-attachments/assets/6e82efa3-b1a9-4570-87d7-42076117d6b8)
+
 This reference architecture consists of:
 
 - a VNET containing: