diff --git a/salt/zeek/defaults.yaml b/salt/zeek/defaults.yaml
index ec3eef3a2..64a332746 100644
--- a/salt/zeek/defaults.yaml
+++ b/salt/zeek/defaults.yaml
@@ -44,6 +44,7 @@ zeek:
         - protocols/ssh/detect-bruteforcing
         - protocols/ssh/interesting-hostnames
         - protocols/http/detect-sqli
+	- protocols/conn/vlan-logging
         - frameworks/files/hash-all-files
         - frameworks/files/detect-MHR
         - policy/frameworks/notice/extend-email/hostnames