diff --git a/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.bicep b/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.bicep
index 27e2448f..d630330e 100644
--- a/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.bicep
+++ b/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.bicep
@@ -15,7 +15,7 @@ param spokeNetwork object = {
   name: 'vnet-spoke'
   addressPrefix: '10.100.0.0/16'
   subnetName: 'snet-spoke-resources'
-  subnetPrefix: '10.100.0.0/16'
+  subnetPrefix: '10.100.0.0/24'
   subnetNsgName: 'nsg-spoke-resources'
 }
 param vpnGateway object = {
@@ -27,7 +27,7 @@ param vpnGateway object = {
 param bastionHost object = {
   name: 'AzureBastionHost'
   subnetName: 'AzureBastionSubnet'
-  subnetPrefix: '10.0.1.0/29'
+  subnetPrefix: '10.0.1.0/26'
   publicIPAddressName: 'pip-bastion'
   nsgName: 'nsg-hub-bastion'
 }
diff --git a/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.json b/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.json
index 6acc540d..bf2082da 100644
--- a/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.json
+++ b/solutions/secure-hybrid-network/nestedtemplates/azure-network-azuredeploy.json
@@ -37,7 +37,7 @@
                 "name": "vnet-spoke",
                 "addressPrefix": "10.100.0.0/16",
                 "subnetName": "snet-spoke-resources",
-                "subnetPrefix": "10.100.0.0/16",
+                "subnetPrefix": "10.100.0.0/24",
                 "subnetNsgName": "nsg-spoke-resources"
             }
         },
@@ -55,7 +55,7 @@
             "defaultValue": {
                 "name": "AzureBastionHost",
                 "subnetName": "AzureBastionSubnet",
-                "subnetPrefix": "10.0.1.0/29",
+                "subnetPrefix": "10.0.1.0/26",
                 "publicIPAddressName": "pip-bastion",
                 "nsgName": "nsg-hub-bastion"
             }
diff --git a/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.bicep b/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.bicep
index 4c74e592..7088762e 100644
--- a/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.bicep
+++ b/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.bicep
@@ -17,7 +17,7 @@ param mocOnpremGateway object = {
 param bastionHost object = {
   name: 'AzureBastionHost'
   subnetName: 'AzureBastionSubnet'
-  subnetPrefix: '192.168.254.0/27'
+  subnetPrefix: '192.168.254.0/26'
   publicIPAddressName: 'pip-bastion'
   nsgName: 'nsg-hub-bastion'
 }
diff --git a/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.json b/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.json
index 8adc0187..6099673d 100644
--- a/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.json
+++ b/solutions/secure-hybrid-network/nestedtemplates/mock-onprem-azuredeploy.json
@@ -31,7 +31,7 @@
             "defaultValue": {
                 "name": "AzureBastionHost",
                 "subnetName": "AzureBastionSubnet",
-                "subnetPrefix": "192.168.254.0/27",
+                "subnetPrefix": "192.168.254.0/26",
                 "publicIPAddressName": "pip-bastion",
                 "nsgName": "nsg-hub-bastion"
             }