I've got similar restrictions on some of my controllers. One thing to keep in mind is that the controller won't actually load the new OS until you reboot. Depending on how restrictive your change control process is, you may be able to attempt loadint the software outside of your change window. Once you have a successful tftp transfer, you can schedule a window for a reboot, which will actually load the new OS. I wouldn't leave too much time between the tftp transfer and then reboot, but I understand your frustration with the tftp transfers... I have about an 80% failue rate on tftp transfers (using tftpd32) over any wan link, no matter how high I set my timeouts and retransmits.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...