Release Date:
October 27, 2026

New Features:

• Support for Quad-core ARM Cortex-A55 1.8 GHz (IPQ5424), 2 GB DDR4, 16/64 GB eMMC
• Support for 1 x 2.5G WAN port and 4 x 1G LAN ports (LAN4/WAN2 combined)
• Support for Internet/WAN including DHCP, Static IP or PPPoE, Dual WAN failover and load balancing, Secure DNS (DoH/DoT/DoQ), and Dynamic DNS
• Support for LANS, including VLANs with independent DHCP, inter-VLAN and RIP routing, static leases and routes, and mDNS gateway
• Support for firewalls, including traffic rules, port forwarding and triggering, outbound NAT, DMZ, DoS protection, SIP ALG, and VPN passthrough
• Support for VPNs, including IPsec site-to-site and client-to-site, OpenVPN and WireGuard servers, VPN users, and certificate management
• Support for SASE Security powered by Exium including on-device IDS and DNS web filtering, SD-WAN mesh, cloud ZTNA, and admin console
• Support for Smart Queue Management (SQM) with manual or Speed-Test based bandwidth configuration per WAN
• Support for NETGEAR Insight cloud and device UI management, SNMP v1/v2/v3, Syslog, LLDP, config backup and restore
• Support for built-in Speed Test, Ping, DNS Lookup, Traceroute, and Packet Capture diagnostics
• Support for scaling up to 16 VLANs, 1,000 DHCP clients, 250,000 firewall connections, and 128 traffic rules
• Support for scaling up to 30 concurrent IPsec tunnels, 50 OpenVPN/WireGuard clients, and 100 VPN users

Known Issues:

• LAG does not deliver aggregated throughput (PPE acceleration lacks DSA LAG support); failover and distribution work
• Fast Path is disabled by default, pending the platform transition to the Atheros header
• Device UI pages load slower than PR460X due to Firewall 4 overhead in QSDK 13.0
• Domotz and Engage are not supported (consistent with PR60X)
• Fan speed and temperature sensor reporting are unavailable; the hardware is not present
• LAN-to-Internet throughput is bounded to 1G by a shared internal switch-to-CPU link
• IDS inspects internet-bound WAN traffic only; hardware-switched LAN-to-LAN traffic is not scanned
• Dual WAN: DNS queries sent directly to a server learned on a failed WAN are dropped, not rerouted.
  Workaround: Configure LAN clients to use the router as their DNS server
• Device Management reports as disabled on the default VLAN but remains enabled by design.
  Workaround: Re-enable the setting so the reported state matches
• Firewall rules using “Any” as source or destination override more specific interface or VLAN rules.
  Workaround: Set an explicit source and destination on every rule.
• Browsers with DNS-over-HTTPS enabled bypass router web filtering.
  Workaround: Disable Secure DNS in the client browser.
• IDS may not raise alerts when the LAN uses public IP space.
  Workaround: Use private IP ranges on the LAN.
• Changing the device UI display language takes 12-15 seconds to redraw the pages.
  Workaround: None required.
• Custom WAN DNS servers cannot be configured from Insight for DHCP and PPPoE connections.
  Workaround: Configure the Custom WAN DNS servers from the device UI.
• After several days of uptime under a heavy configuration, the IPsec VPN page can display an error, and the log download fails.
  Workaround: Restart the device.

Download Link: https://www.downloads.netgear.com/files/GDC/PR30SG/PR30SG-V3.2.0.50.zip

Firmware Update Instructions:

To update your product’s firmware, follow the instructions in your product’s user manual. To find your user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.