I've been rolling thru the Builds in May and doing some basic QA for myself. Can anybody else confirm that the Super Admin and lots of 2FA Failures does NOT generate IDS block. I consider this a Security Blind Spot. What do you think?

Some software I use has a citadel mode which totally blocks all Admin Logons when the server is under major DDoS. They software also has a special trusted IP Address list that allows logons when in citadel mode.