diff --git a/salt/top.sls b/salt/top.sls
index f7ea450ac..571558a75 100644
--- a/salt/top.sls
+++ b/salt/top.sls
@@ -6,7 +6,7 @@ base:
     - firewall
     - pcap
     - suricata
-    {%- if BROVER != SURICATA %}
+    {%- if BROVER != 'SURICATA' %}
     - bro
     {%- endif %}
     - filebeat