anchor.diff:  This is because staging often requires access to different resources, such as
   dependencies.
   
  -You use different commands to apply an ASG to each of the four sets. For more information, see the [Procedures](#procedures) section of this topic.
  +You use different commands to apply an ASG to each of the four sets. For more information, see the [Procedures](#procedures) section below.
   
   <p class="note"><strong>Note</strong>: To apply a staging ASG to apps within a space, you must use cf CLI v6.28.0 or later.
   </p>
  
positive.code: In turn, the JSON file is the input for the `cf create-security-group` command
  that creates an ASG.
  
  You can download the latest release of the ASG Creator from the Cloud Foundry incubator repository on Github:  [https://github.com/cloudfoundry-incubator/asg-creator/releases/latest](https://github.com/cloudfoundry-incubator/asg-creator/releases/latest)
  
  
  ## <a id='logging'></a> ASG Logging
  
  The KB article [How to use Application Security Group (ASG) logging](https://discuss.pivotal.io/hc/en-us/articles/115005916027) describes how you can use ASGs to correlate emitted logs back to an app.
  
  <% end %>
  
negative.code: 
  To resolve hostnames to IP addresses, apps require DNS server connectivity,
  which typically use port 53.
  Admins should create or update a `dns` ASG with appropriate rules. Admins can further restrict the DNS servers to specific IP addresses or
  ranges of IP addresses.
  
  Example `dns` ASG:
  