I work in a similar restrictive environment, and use a local cpan repo using minicpan hosted infernally.