diff --git a/CHANGELOG b/CHANGELOG
index a9fd5d8..58952c0 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -59,6 +59,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * nagios-nrpe: handle the case where cached_mem is in GB to convert it in MB in check_free_mem.sh
 * post-install: improve management of ldif file for ldap
 * post-install: ignore errors from syspatch
+* nagios-nrpe: grep in check_ipsecctl_critiques.sh was too large
 
 ### Removed
 
diff --git a/roles/nagios-nrpe/files/plugins_bsd/check_ipsecctl_critiques.sh b/roles/nagios-nrpe/files/plugins_bsd/check_ipsecctl_critiques.sh
index c5ad4bf..b43e086 100755
--- a/roles/nagios-nrpe/files/plugins_bsd/check_ipsecctl_critiques.sh
+++ b/roles/nagios-nrpe/files/plugins_bsd/check_ipsecctl_critiques.sh
@@ -32,7 +32,7 @@ fi
 
 # Make sure "0.0.0.0" is not configured
 
-if /sbin/ipsecctl -sa | grep -qF 0.0.0.0; then
+if /sbin/ipsecctl -sa | grep -qF " 0.0.0.0"; then
     echo "CRITICAL : Configuration error on client side, \"0.0.0.0\" is configured and makes the network to bug. Check with \"ipsecctl -sa | grep -F 0.0.0.0\" which VPN is affected and shut it down, and contact the client or the VPN provider to solve the problem."
     STATUS=2
 fi