diff --git a/setup/so-setup b/setup/so-setup
index fdc69076b..c07cca70b 100755
--- a/setup/so-setup
+++ b/setup/so-setup
@@ -231,6 +231,9 @@ fi
 
 if [[ $is_distmaster || ( $is_sensor || $is_node ) && ! $is_eval ]]; then
 	whiptail_master_updates
+	if [[ $setup_type == 'network' && $MASTERUPDATES == 1 ]]; then
+		whiptail_master_updates_warning
+	fi
 fi
 
 if [[ $is_minion ]]; then
diff --git a/setup/so-whiptail b/setup/so-whiptail
index 72455fc9e..31a0c05ec 100755
--- a/setup/so-whiptail
+++ b/setup/so-whiptail
@@ -1027,7 +1027,17 @@ whiptail_master_updates() {
 			;;
 	esac
 
+}
 
+whiptail_master_updates_warning() {
+	[ -n "$TESTING" ] && return
+
+	whiptail --title "Security Onion Setup"\
+	--msgbox "Updating through the master node requires the master to have internet access, press ENTER to continue"\
+	8 75
+
+	local exitstatus=$?
+	whiptail_check_exitstatus $exitstatus
 }
 
 whiptail_node_updates() {