WAX630 & WAX620s

I have 3 APs.  WAX 630 and 2 WAX620s all root APs meshed together.  All year these have worked generally well with minor annoyances here and there.  On Nov 6th, that all changed.  it started with not being able to see them from the cloud management portal (they showed disconnected) but they still accepted clients and passed traffic.  After some troubleshooting, i had t make a firewall modification (didn't have to do this at all before) to allow the APs to be in a group where I"m not doing any inspection. Management access restored. But since then all clients cannot connect or IF they do connect, it'll say connected without Internet. Support hasn't been much help on this at all. i have 4 SSIDs and a flat network - i'll create VLANs and more streamlined later.  VLAN1 is it.  i have an SSID called MAIN_5g-6g where i have both frequencies enabled.  this SSID has NO ISSUES and works fine.  It uses 5GHZ HIGH.  i have another called LITTLE_5ghz that uses 5Ghz LOW and a final one that uses 2.4Ghz only.  The 4th is a guest network that doesnt matter. Completely random, I have devices on both LITTLE and the 2.4ghz but other devices, Android phones, Iphones....Google Nest, either cannot connect at all OR if they do connect, they say connected without Internet.  If that we true, downstream NOTHING would connect given the 1 VLAN scenario I have at the moment. I decided to create another SSID to test, same result.  Not a clue how a resolve. Thanks in advance for any insight.