Enhancements:

• Supports NAT mode configurations per SSID. 
• WAX620: Updates the Tx power adjustments for Australia and New Zealand in the 2.4 GHz band.

Security Fixes:

• Fixes security vulnerabilities.

For more information about security vulnerabilities, visit https://www.netgear.com/about/security/.

Bug Fixes:

• Fixes the issue where the config crashes and the UI is not reachable when attempting to access the AP UI after changing the management VLAN. 
• Fixes the issue where the AP reports all radios are down when powered up with a PoE++ injector.
• Fixes the issue where Insight reports "Unknown Username" for authenticated wireless clients via WPA2-Enterprise.
• Fixes the issue where WAX630 AP is not powering up with 802.3bt when powered by the M4250-40G8XF-PoE++ switch. 
• Fixes the issue was unable to update SSID custom schedule time when a full day is scheduled.

Known Issues:

• iOS devices with specific iOS versions might fail to connect to a WPA3 enterprise SSID.
  Workaround: Update the device to the latest iOS version.
• Some clients might not display an auto pop-up while connecting to a guest SSID, or there might be a delay before the splash page displays.
  Workaround: Use a web browser to access the Internet.
• An Intel Wireless AC 9560 client on the Windows 10 operating system can fail to connect when both PMF and 802.11r are enabled on the SSID.
  Workaround: Disable PMF configuration.
• aplogin.com and aplogin.net might not redirect to the login page on some Android clients with specific Chrome browser versions.
  Workaround: Enter the access point's IP address to access the login page.
• Data path and client connectivity issues may be observed when the access point is operating on a DFS channel where the channel width is set to 80 MHz.
  Workaround: Change the channel width to 40 MHz.
• Some older generation iOS devices with iOS version 14.4.2 and above might fail to connect to a WPA3 personal SSID.
  Workaround: Change the SSID security to WPA3/WPA2 Personal.
• MAC ACL does not work as expected when MAC Randomization is enabled for wireless clients.
  Workaround: Disable MAC Randomization on the clients.
• Client connectivity and throughput-related interoperability issues can occur with certain Windows, Android, and iOS client OS versions when WPA3/WPA2 mixed mode security is enabled on the SSID.
  Workaround: Upgrade to the latest available Windows/Android/iOS OS version, and update the WiFi client to the latest driver.
• Interoperability issues can occur with certain clients when the Band Steering feature is enabled.
  Workaround: Disable this feature if client interoperability issues are observed.
• Some special characters are not supported in Instant Captive Portal SSIDs.
  Workaround: We recommend against using special characters in the SSID name.
• In some cases, wirelessly connected to NAT mode SSID are not able to reach the internet when URL filtering is enabled.
  Workaround: Avoid NAT mode SSID and URL filtering combination.

Download Link: https://www.downloads.netgear.com/files/GDC/WAX620/WAX620_WAX630_firmware_V9.6.1.4.zip

Firmware Update Instructions:

To update your product’s firmware, follow the instructions in your product’s user manual. To find your user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.