So, For a long time i have used:
login block-for 900 attempts 3 within 120
login on-failure log
login on-success log
This logs to syslog fine and can be dumped to security software and reports ran to search string when needed just fine. Lately, i noticed that solar winds has a "cisco security audit". It hit all my switches for not having "security authentication failure rate". However, not a single IOS or XE version i have in use will take the command. It appears this command should take a count number on global and then log to syslog if it's exceeded, but it seems redudant with constant logging from "login on-failure log" and "login block-for" offering the ability to restrict logins with quiet mode acl.
Is there something about this command i am missing here or has it been removed?