diff --git a/pkg/vpcmodel/semanticDiffSubnets.go b/pkg/vpcmodel/semanticDiffSubnets.go
index 22239622f..502efaa85 100644
--- a/pkg/vpcmodel/semanticDiffSubnets.go
+++ b/pkg/vpcmodel/semanticDiffSubnets.go
@@ -131,7 +131,8 @@ func (subnetConfConnectivity *SubnetConfigConnectivity) subtract(other *SubnetCo
 				if otherSrc, ok := other.subnetConnectivity[srcInOther]; ok {
 					if otherConn, ok := otherSrc[dstInOther]; ok {
 						// ToDo: https://github.com/np-guard/vpc-network-config-analyzer/issues/199
-						if conns.Equals(otherConn) {
+						subtractConn := conns.Subtract(otherConn)
+						if subtractConn.IsEmpty() {
 							continue // no diff
 						}
 						connDiff.conn2 = otherConn