You may check the Partner webinar, they have one of the series discussing about BC ASG
From my understanding basically if you want on-prem, it would be based only on BC appliances (ASG)
For cloud, it can be either ATP Network/ASG....
Not sure if it can be hybrid....i would believe the answer is to select either one..