Android v11 and v13 refuse to authenticate with WC7600 wireless

We have a guest WiFi SSID setup with WPA2 with Radius and AES encryption, internal RADIUS.

iPhone and Windows devices can connect as they have the option to not validate the certificate that Netgear factory installed, however from v11 of Android onwards we cannot connect. We just get authentication failed after accepting the certificate.

We tried setting up an external RADIUS server with an publicly trusted certificate but this did the same thing.

One user has Android v9 which does have the option to not validate certificate and this device does connect fine.

I am at a loss as to how we connect more modern Android (potentially IOS in the future) devices to a WC7600v2 infrastructure.

I did try using captive portal for authentication and this worked ok for Android however iPhone devices would only get the portal 2 out of 3 times and sometimes it would take nearly a minuet to appear so not practical and confirmed by Netgear support as similar behavior to what they experience.

Anyone experience this and have a solution ?