anchor.diff:  
   ## <a id='deleting-groups'></a>Deleting Application Security Groups ##
   
  -<p class='note'><strong>Note</strong>: Only ASGs which are unbound can be deleted. See <a href="#unbinding-groups">Unbinding Application Security Groups</a>.</p>
  -
  -To delete an ASG:
  +<p class='note'><strong>Note</strong>: You can only delete unbound ASGs. See <a href="#unbinding-groups">Unbinding Application Security Groups</a>.</p>
  +
  +To delete an ASG, run the following command:
   
   <pre class="terminal">
   $ cf delete-security-group SECURITY-GROUP
  
positive.code: 
  ### <a id='public-networks-example'></a>Public Networks ###
  
  Public network connectivity is often required by applications to retrieve application dependencies or to integrate with services available on public networks. Example application dependencies include public Maven repositories, NPM, RubyGems, Docker registries and others.
  
  <p class='note'><strong>Note</strong>: It is strongly recommended to exclude IaaS metadata endpoints, such as 169.254.169.254, because the metadata endpoint could expose sensitive environment information to untrusted applications. The `public_networks` example below accounts for this recommendation.
  
  Example `public_networks` ASG:
  
  
negative.code: 
  ## <a id='binding-groups'></a>Binding Application Security Groups ##
  
  <p class='note'><strong>Note</strong>: Binding an ASG does not affect started applications until you restart them.</p>
  
  To apply an ASG to application containers, you must first bound it to a default set or a space.
  
  To bind an ASG to the `default-staging` set, run the following command:
  
  <pre class="terminal">
  $ cf bind-staging-security-group SECURITY-GROUP
  </pre>
  
  To bind an ASG to the `default-running` set, run the following command:
  
  <pre class="terminal">
  $ cf bind-running-security-group SECURITY-GROUP
  </pre>
  
  To bind an ASG to a specific space, run the following command:
  
  <pre class="terminal">
  $ cf bind-security-group SECURITY-GROUP ORG SPACE
  