anchor.diff:    </tr>
   </table>
   
  +
   ## <a id='procedures'></a> Managing ASGs with the cf CLI
   
   This section provides the commands you need to create and manage ASGs.
   
  -### <a id='viewing'></a>View ASGs
  +### <a id='viewing'></a> View ASGs
   
   Run the following cf CLI commands to view information about existing ASGs:
   
  
positive.code: The platform sets up rules to filter and log outbound network traffic from app and task instances.
  ASGs apply to both buildpack-based and Docker-based apps and tasks.
  
  ### Staging and Running ASGs
  
  Administrators can define a `staging` ASG for app and task staging, and a `running` ASG for app and task runtime.
  
  When apps or tasks begin staging, they require traffic rules permissive enough to allow them to pull resources from the network.
  A running app or task no longer needs to pull traffic rules can be more restrictive and secure.
  To distinguish between these two security requirements, administrators can define a `staging` ASG for app and task staging with more permissive rules, and a `running` ASG for app and task runtime with less permissive rules.
  
  ### Platform-Wide and Space-Scoped ASGs
  
  To provide granular control when securing a deployment, administrators can
  assign platform-wide ASGs that apply to all app and task instances for the entire deployment, or space-scoped ASGs that apply only to apps and tasks in a particular space.
  
  In environments with both platform-wide and space-specific ASGs, the ASGs for a particular space combine with the platform ASGs to determine the rules for that space.
  
  ### Simplifying ASGs with a Services Subnet
  
  ASGs can be complicated to configure correctly, especially when the specific IP
  addresses listed in a group change.
  
negative.code: This topic provides an overview of Application Security Groups (ASGs), and describes how to manage and administer them. Many of the steps below require the [Cloud Foundry Command Line Interface](../cf-cli/install-go-cli.html) (cf CLI) tool. 
  <%= vars.asg_first_time %>
  
  ## <a id='introduction'></a> About Application Security Groups
  
  Application Security Groups (ASGs) are a collections of egress rules that
  specify the protocols, ports, and IP address ranges where app or task instances 
  