anchor.diff:  
   ASGs can be complicated to configure correctly, especially when the specific IP addresses listed in a group change.
   
  -<<<<<<< HEAD
   To simplify securing a deployment while still allowing apps reach external services, operators can deploy the services into a subnet that is separate from their <%= vars.product_short %> deployment, then create ASGs for the apps that allow those service subnets, while denying access to any VM hosting other apps.
  -=======
  -To simplify securing a deployment while still allowing apps reach external
  -services, operators can deploy the services into a subnet that is separate from
  -their Cloud Foundry deployment, then create ASGs for the apps that whitelist those service subnets, while denying access to any VM hosting other apps.
  ->>>>>>> f696ae7e954a40e0d4e60f222e46f7e7a1d2f032
   
   For examples of typical ASGs, see the <a href="#typical-groups">Typical Application Security Groups</a> section below.
   
  
positive.code: $ cf update-security-group my-asg ~/workspace/my-asg-v2.json
  </pre>
  
  <p class='note'><strong>Note</strong>: Updating an ASG does not affect started apps until you restart them. To restart all of the apps in an org or a space,
  use the <a href="https://github.com/cloudfoundry-incubator/app-restarter">app-restarter</a> cf CLI plugin.
  </p>
  
  ### <a id='unbinding-groups'></a> Unbind ASGs
  
  <p class='note'><strong>Note</strong>: Unbinding an ASG does not affect started apps until you restart them. To restart all of the apps in an org or a space,
  use the <a href="https://github.com/cloudfoundry-incubator/app-restarter">app-restarter</a> cf CLI plugin.
  </p>
  
  To unbind an ASG from the platform-wide staging ASG set, run `cf unbind-staging-security-group SECURITY-GROUP`. Replace `SECURITY-GROUP` with the name of your security group.
  
  
negative.code: 
  ### <a id='binding-groups'></a> Bind ASGs
  
  <p class='note'><strong>Note:</strong> Binding an ASG does not affect started apps until you restart them. To restart all of the apps in an org or a space, use the <a href="https://github.com/cloudfoundry-incubator/app-restarter">app-restarter</a> cf CLI plugin.</p>
  
  To apply an ASG, you must first bind it to an ASG set.
  
  