anchor.diff:  
   To delete a policy that allows direct network traffic from one app to another, enter the following command:
   
  -<pre>
  +<pre class="terminal">
   $ cf remove-access SOURCE-APP DESTINATION-APP --protocol PROTOCOL --port PORT
   </pre>
   
  
positive.code: 
  To create a policy that allows direct network traffic from one app to another, enter the following command:
  
  <pre>
  $ cf allow-access SOURCE-APP DESTINATION-APP --protocol PROTOCOL --port PORT
  </pre>
  
  Where:<br>
  `SOURCE-APP` is the name of the app that will be sending traffic.<br>
  `DESTINATION-APP` is the name of the app that will be receiving traffic.<br>
  `PROTOCOL` is one of the following: `tcp` or `udp`.<br>
  `PORT` is the port at which to connect to the destination app. The allowed range is 1 to 65535.<br>
  
  
  For example, 
  
  <pre class="terminal">
  $ cf allow-access frontend backend --protocol tcp --port 8080
  
negative.code: 
  + To list the all the policies in your deployment, enter the following command:
  
      <pre class="terminal">
      $ cf list-access
      </pre>
  + To list the policies for an app, enter the following command:
  
      <pre class="terminal">
      $ cf list-access --app MY-APP
      </pre>
  
      The following example command lists policies for the app `frontend`:
      
      <pre class="terminal">
      $ cf list-access --app frontend
  