Enhancements:

• Option to add subnet mask and DHCP lease time configuration in NAT mode SSID configuration.
• Improved client connection/disconnection alarm notifications.

Bug Fixes:

• Fixes various issues in the External Captive Portal feature.
• Fixes an issue where the AP starts operating on 802.3af power even when powered by an 802.3at or 802.3bt switch.
• Fixes an issue where the captive portal splash page is not displayed when a client connects to a Captive portal SSID with Client Isolation feature enabled.
• Fixes an issue where the captive portal splash page does not display when a client connects to an SSID using WPA2 Enterprise security.
• Fixes an issue where active user sessions are not logged out when location-wide device credentials change.
• Fixes the issue where sometimes AP fails to get IP address when multiple SSID with profile VLAN are created one after another.
• Adds system stability improvements.

Known Issues:

• Changes to a NAT SSID configuration can take 2 to 3 minutes to apply.
  Workaround: Please wait at least 3 minutes before connecting any clients.
• Facebook Wi-Fi authentication does not work because Facebook has discontinued the support for this feature.
  Workaround: Use the Instant Captive Portal feature or the basic Captive Portal feature.
• The captive portal splash page might display the error message "ERR_TOO_MANY_REDIRECTS" while connecting to a captive portal that is enabled on an SSID.
  Workaround: Clear the browser cache.
• 802.11r roaming does not work between an AP that runs firmware version 10.5.0.x and another AP that runs an older firmware version at the same Insight network location.
  Workaround: Upgrade all APs at an Insight network location to the latest firmware version.
• The AP stops responding after you first change or enable an Instant Captive Portal and then change or enable a dynamic VLAN (DVLAN) configuration, or the other way around.
  Workaround: After enabling the Instant Captive Portal, wait a few minutes before you enable the DVLAN configuration. Or, after enabling the DVLAN configuration, wait a few minutes before you enable the Instant Captive Portal.
• Clients connected to a captive portal that is configured on an SSID might not see the splash page for authentication when the VLAN of the SSID is the same as the management VLAN, a VLAN that is configured as a DVLAN, or a VLAN that has a multi-Pre-Shared Key (multi-PSK) configured.
  Workaround: For the SSID on which the captive portal is configured, use the default VLAN or a unique VLAN that is not used as the management VLAN, that is not a DVLAN, or that does not use MPSK.
• A RADIUS based MAC ACL does not work with multi-PSK and DVLAN.
• mDNS: A device running Windows might not discover certain printers.
  Workaround: Manually add the IP address of the printer on the Windows device.
• mDNS: Even though Apple AirPlay services are discoverable, they might not be accessible.
• Your web browser might not redirect automatically to the login page after a firmware upgrade.
  Workaround: Refresh the page in your web browser.
• Radio information on the AP Dashboard page might not be displayed properly.
  Workaround: Refresh the page in your web browser.
• Captive portal authentication does not work if you simultaneously change the captive portal and the VLAN configuration for an SSID.
  Workaround: Change either the captive portal configuration or the VLAN configuration for an SSID and save the changes. Then go back to the SSID and make the other configuration changes.  
• When client isolation is enabled for an SSID, clients that are connected to this SSID cannot reach each other even if their IP addresses are added to the allowed list.
• Clients that use the Intel AX210 might encounter disruptions when roaming.
• Video streaming to multiple clients does not work properly if there are more than eight clients in a single multicast group.
• If clients experience connectivity issues on the higher band channels of the 5 GHz radio and subsequently switch to the 2.4 GHz radio, they might experience lower throughput.
  Workaround: Configure lower band channels on the 5 GHz radio.
• Some newer IoT devices might experience issues connecting to the AP.
  Workaround: Upgrade the IoT devices to the latest driver version and try again. If security is set to WPA3 or WPA2/WPA3 mixed mode, change it to WPA2 mode, and try again.

Download Link: https://www.downloads.netgear.com/files/GDC/WAX620/WAX620_firmware_V10.6.0.7.zip

Firmware Update Instructions:

To update the firmware of your product, follow the instructions mentioned in the product manual. To refer the user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.