Chateau LTE Firmware without FOTA

My cellular APN is private and doesn’t carry a default route. It only forwards traffic to a pair of DMZ where proxies are located. This is a conscious architecture decision as it provides a high level of security against compromised devices interacting with Internet hosts.

I have a new Chateau device I’m testing on this network and I can’t upgrade the firmware.

> /interface/lte/monitor lte1 once
;;; A newer version of modem firmware is available!

/interface lte firmware-upgrade lte1
installed: EG12EAPAR01A06M4G
status: error: unable to resolve hostname (6)

What is the hostname the router is looking for? What is the transfer protocol? If I know how/where the device is looking for its firmware I can set up a proxy.

Alternatively can I just download the current firmware and install it myself, instead of using FOTA?

-JB

It’s trying to access https://download.mikrotik.com/ for the new lte firmware, which is 159.148.147.204:80 according to http://forum.mikrotik.com/t/mikrotik-chateau-5g-modem-firmware-update/151414/1