Some organizations have airgapped networks with no connection to the Internet. Security Onion works fine on these airgapped networks, although it may be missing some updates due to lack of Internet connection.
You can transfer updates to airgapped networks via DVD, USB, or other media.
@SkiTheSlicer has created a set
of scripts to assist in updating airgapped Security Onion
installations:
For Docker containers, sneakernet updates can be performed by doing
something like the following: