NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
ThorPan
Sep 30, 2025Aspirant
RS500 — Nighthawk BE12000 WiFi 7 Tri-Band Router Protection Engine Problems
Hi, Unfortunately, I'm 2 weeks past the measly 90 days of support for my RS500 - Nighthawk BE12000 router, so I'm posting here instead, trying to prompt Netgear to actually create firmware that w...
ThorPan
Oct 01, 2025Aspirant
Hi,
Thanks for your response!
Who is officially recommending the Protection Engine be turned off? It's it's Netgear, then they KNOW there's an issue with their code and should fix it. The Protection Engine doesn't protect anything when it's disabled, and causes security concerns for everyone who has it disabled. My old router was probably more secure than this one is with the Protection Engine disabled. At least there was something there, even if it was outdated!
It's a ZHONE ONT, but it's not the WAN side having the problem; it's the LAN side on WiFi that's having issues. The WAN uplink fix was in firmware v.1.0.5.12, and that's still working OK.
The link between the modem and router was the cable supplied by Netgear, so we can assume it was the appropriate type of cable. There are no markings that I can see on the cable to determine specifications. When I had the WAN problem, I tried a different CAT6 cable, and it still had the problem.
I'm using channel 11 on the 2.4 GHz WiFi, and all the rest are set to Auto to allow the router to choose the best channel to avoid local interference with others in the neighborhood.
None of our devices are using random MAC addresses. Even if they were, they only randomize when they connect to a different WiFi network.
Since setting up the router, I have not done a factory reset on it since it took me hours of work putting Device Names on the 30+ devices connected to the router, and I wasn't about to go through all of that trouble again since my configuration is a bit more complicated than the typical user's is.
IPV6 is disabled since it doesn't perform as well as expected due to the translation to IPV4.
I don't recall what the default IP address pool was, but I set mine to be something of my own choosing.
FURRYe38
Oct 01, 2025Guru - Experienced User
We've already past this onto NG and are aware of it. All in there hands.
Actually PE is having an oppostie effect, please review:
Protection Engine and Stealth ports | NETGEAR Communities
TCP SYN Flooding on RAX54v2 Router, Please help! | NETGEAR Communities
Which we have also passed on to NG as well for review.
Considering all that, you can keep it enabled if you want too. Will need to be patient while NG works on this. No idea when that will be. I have been using my RS router with it disabled and it's been working fine for me.
Please try manual channels 11 and 40.
When doing a factory reset, it's not necessary to input or reconnect devices or manually connect devices, if you use same SSID name and password as before, then all of your wifi devices will auto reconnect.
Also be sure to save off a backup configuration to file as well. Saves time if a FR is needed.