diff --git a/packages/cisco_asa/changelog.yml b/packages/cisco_asa/changelog.yml
index daacda29c01..ca5a30ca223 100644
--- a/packages/cisco_asa/changelog.yml
+++ b/packages/cisco_asa/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.1.1"
+  changes:
+    - description: Fix logic that checks for the 'forwarded' tag
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/1805
 - version: "1.1.0"
   changes:
     - description: Update to ECS 1.12.0
diff --git a/packages/cisco_asa/data_stream/log/agent/stream/stream.yml.hbs b/packages/cisco_asa/data_stream/log/agent/stream/stream.yml.hbs
index 118adc06c53..28ea4aaa984 100644
--- a/packages/cisco_asa/data_stream/log/agent/stream/stream.yml.hbs
+++ b/packages/cisco_asa/data_stream/log/agent/stream/stream.yml.hbs
@@ -10,7 +10,7 @@ tags:
 {{#each tags as |tag i|}}
   - {{tag}}
 {{/each}}
-{{#contains tags "forwarded"}}
+{{#contains "forwarded" tags}}
 publisher_pipeline.disable_host: true
 {{/contains}}
 processors:
diff --git a/packages/cisco_asa/data_stream/log/agent/stream/udp.yml.hbs b/packages/cisco_asa/data_stream/log/agent/stream/udp.yml.hbs
index 121cfdc4a02..f76534e8ceb 100644
--- a/packages/cisco_asa/data_stream/log/agent/stream/udp.yml.hbs
+++ b/packages/cisco_asa/data_stream/log/agent/stream/udp.yml.hbs
@@ -7,7 +7,7 @@ tags:
 {{#each tags as |tag i|}}
   - {{tag}}
 {{/each}}
-{{#contains tags "forwarded"}}
+{{#contains "forwarded" tags}}
 publisher_pipeline.disable_host: true
 {{/contains}}
 processors:
diff --git a/packages/cisco_asa/manifest.yml b/packages/cisco_asa/manifest.yml
index 7f632604a37..8799d0a0a93 100644
--- a/packages/cisco_asa/manifest.yml
+++ b/packages/cisco_asa/manifest.yml
@@ -1,7 +1,7 @@
 format_version: 1.0.0
 name: cisco_asa
 title: Cisco ASA
-version: 1.1.0
+version: 1.1.1
 license: basic
 description: This Elastic integration collects logs from Cisco ASA network devices
 type: integration