Adding more info

Author: Maddy-Cloudflare

src/content/docs/magic-firewall/how-to/enable-ids.mdx

@@ -83,8 +83,9 @@ Similarly, sending a patch request with the `enabled` field set to `true` will e
 IDS rules are run on a subset of packets. IDS also supports the current flows:
 
 - Magic WAN to Magic WAN.
-- Magic Transit in both directions.
+- Magic Transit ingress traffic only when traffic is handled through direct server return.
+- Ingress and egress traffic when Magic Transit has the [Egress option enabled](/reference-architecture/architectures/magic-transit/#magic-transit-with-egress-option-enabled).
 
 ## Next steps
 
-You must configure Logpush to log detected risks. Refer to [Configure a Logpush destination](/magic-firewall/how-to/use-logpush-with-ids/) for more information. Additionally, all traffic that is analyzed can be accessed via [network analytics](/analytics/network-analytics/). Refer to [GraphQL Analytics](/magic-firewall/tutorials/graphql-analytics/) to query the analytics data.
+You must configure Logpush to log detected risks. Refer to [Configure a Logpush destination](/magic-firewall/how-to/use-logpush-with-ids/) for more information. Additionally, all traffic that is analyzed can be accessed via [network analytics](/analytics/network-analytics/). Refer to [GraphQL Analytics](/magic-firewall/tutorials/graphql-analytics/) to query the analytics data.