diff --git a/salt/common/tools/sbin/soup b/salt/common/tools/sbin/soup
index 659265d03..a2d194203 100755
--- a/salt/common/tools/sbin/soup
+++ b/salt/common/tools/sbin/soup
@@ -398,6 +398,8 @@ clone_to_tmp() {
   SOUP_BRANCH=""
   if [ -n "$BRANCH" ]; then
     SOUP_BRANCH="-b $BRANCH"
+  else
+    SOUP_BRANCH="-b 2.3/main"
   fi
   git clone $SOUP_BRANCH https://github.com/Security-Onion-Solutions/securityonion.git
   cd /tmp