Have I understood the Firewall settings correctly?

I’m guessing the ‘Duration(s)’ is the time for which an IP is banned after ‘Count’ failed attempts. If this is the case, then what is the difference between ‘Ratelimit threshold’ and ‘Block threshold’?