anchor.diff:  | `description`   |An optional text field for operators managing security group rules
   
   
  +<% if vars.product_name.include? "CF" %>
   
   ##<a id="process"></a> Process for Administering ASGs
   
  
positive.code: A running app or task no longer needs to pull traffic rules can be more restrictive and secure.
  To distinguish between these two security requirements, administrators can define a `staging` ASG for app and task staging with more permissive rules, and a `running` ASG for app and task runtime with less permissive rules.
  
  ### Platform-wide and Space-scoped ASGs
  
  To provide granular control when securing a deployment, administrator can
  assign platform-wide ASGs that apply to all app and task instances for the entire deployment, or space-scoped ASGs that apply only to apps and tasks in a particular space.
  
  In environments with both platform-wide and space-specific ASGs, the ASGs for a particular space combine with the platform ASGs to determine the rules for that space.
  
negative.code: owner: Security
  ---
  
  <strong><%= modified_date %></strong>
  
  This topic provides an overview of Application Security Groups (ASGs), and describes how to manage and administer them. Many of the steps below require the [Cloud Foundry Command Line Interface](../cf-cli/install-go-cli.html) (cf CLI) tool. 
  