anchor.diff:  
   For examples of typical ASGs, see the <a href="#typical-groups">Typical Application Security Groups</a> section of this topic.
   
  -### <a id='default-asg'></a>Default ASGs ##
  +### <a id='default-asg'></a>Default ASGs
   
   <% if vars.product_name == 'CF' %>
   <%= partial 'default_asg_oss' %>
  
positive.code: $ cf unbind-security-group my-asg my-org my-space --lifecycle staging
  </pre>
  
  ### <a id='deleting-groups'></a>Delete ASGs ##
  
  <p class='note'><strong>Note</strong>: You can only delete unbound ASGs. To unbind ASGs, see <a href="#unbinding-groups">Unbind ASGs</a> above.
  </p>
  
negative.code: After the ASG is created, you must bind it to an ASG set before it takes effect.
  See <a href="#binding-groups">Bind ASGs</a> below.
  
  ### <a id='binding-groups'></a>Bind ASGs 
  
  <p class='note'><strong>Note</strong>: Binding an ASG does not affect started apps until you restart them. To restart all of the apps in an org or a space, use the <a href="https://github.com/cloudfoundry-incubator/app-restarter">app-restarter</a> cf CLI plugin.
  </p>
  