diff --git a/shared/checks/oval/ftp_present_banner.xml b/shared/checks/oval/ftp_present_banner.xml
index 987ab67a6d94..48dbe35aa664 100644
--- a/shared/checks/oval/ftp_present_banner.xml
+++ b/shared/checks/oval/ftp_present_banner.xml
@@ -21,7 +21,7 @@
   </ind:textfilecontent54_test>
   <ind:textfilecontent54_object comment="Banner for FTP Users" id="object_test_ftp_present_banner" version="1">
     <ind:filepath>/etc/vsftpd/vsftpd.conf</ind:filepath>
-    <ind:pattern operation="pattern match">^[\s]*banner_file[\s]*=[\s]*/etc/issue*$</ind:pattern>
+    <ind:pattern operation="pattern match">^[\s]*banner_file=/etc/issue[\s]*$</ind:pattern>
     <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
   </ind:textfilecontent54_object>
 </def-group>
diff --git a/shared/fixes/bash/ftp_present_banner.sh b/shared/fixes/bash/ftp_present_banner.sh
new file mode 100644
index 000000000000..a3b97d18c4c3
--- /dev/null
+++ b/shared/fixes/bash/ftp_present_banner.sh
@@ -0,0 +1,5 @@
+# platform = multi_platform_wrlinux
+
+. /usr/share/scap-security-guide/remediation_functions
+
+replace_or_append '/etc/vsftpd.conf' '^banner_file' '/etc/issue' '@CCENUM@' '%s=%s'