ran more "common ports" and "all service ports" scans, and something is really off with ER605's. Results are different everytime i run, sometimes majority is closed results, and sometimes shows majority as stealth. 

Another odd thing is that if i reboot the router then run the test, it will show all ports as stealth for a short period of time, afterward goes back to random results again...

Can someone please give shieldsup test a try and see what results you get

no matter what i tried, the results are all over the map! Tried provisioning the router again thinking maybe the initialing provisioning messed something up. Still same results

what ive done to remediate this for now is to create a nat rule to dmz (none existant ip), so far this is catching all ports except for 0 and 1 which is still showing as closed.

So im guessing firmware didnt actually fix the shieldsup test like it stated in the release notes... might have to go back to sophos...

  @Fae that was it, I had "Block TCP Scan with RST" enabled. After disabling seems to so far show all tests as stealth. Will continue testing and update if it gives different results. Thank you so much!!