anchor.diff:  After the ASG is created, you must bind it to an ASG set before it takes effect.
   See <a href="#binding-groups">Bind ASGs</a> below.
   
  -### <a id='binding-groups'></a>Bind ASGs ##
  +### <a id='binding-groups'></a>Bind ASGs 
   
   <p class='note'><strong>Note</strong>: Binding an ASG does not affect started apps until you restart them. To restart all of the apps in an org or a space, use the <a href="https://github.com/cloudfoundry-incubator/app-restarter">app-restarter</a> cf CLI plugin.
   </p>
  
positive.code: <p class="note"><strong>Note</strong>: To apply a staging ASG to apps within a space, you must use cf CLI 6.28.0 or later.
  </p>
  
  ### <a id='creating-groups'></a>The Structure and Attributes of ASGs ##
  
  ASG rules are specified as a JSON array of ASG objects. An ASG object has the following attributes:
  
  
negative.code: 
  For examples of typical ASGs, see the <a href="#typical-groups">Typical Application Security Groups</a> section of this topic.
  
  ### <a id='default-asg'></a>Default ASGs
  
  <% if vars.product_name == 'CF' %>
  <%= partial 'default_asg_oss' %>
  