Airgapped Networks

Please note! This wiki is no longer maintained. Our documentation has moved to https://securityonion.net/docs/. Please update your bookmarks. You can find the latest version of this page at: https://securityonion.net/docs/Airgapped-Networks.

Some organizations have airgapped networks with no connection to the Internet. Security Onion works fine on these airgapped networks, although it may be missing some updates due to lack of Internet connection.

Updating

You can transfer updates to airgapped networks via DVD, USB, or other media.

@SkiTheSlicer has created a set of scripts to assist in updating airgapped Security Onion installations:
https://github.com/SkiTheSlicer/securityonion-airgap

Docker

For Docker containers, sneakernet updates can be performed by doing something like the following:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Docker#sneakernet-updates