I would really like for Norton products to show detailed information on SONAR detections. As it is now we only get information about that a file was blocked by SONAR but nothing about why.
It would be a killer feature to see more details like what triggered the detection (reading a file, opening a TCP connection, accessing a specific URI resource etc). Showing more information would also help users to make a qualified guess if the SONAR detection is correct or not; ex users might have a better idea of what their programs are supposed do than SONAR, especially advanced users.
As reference/example one could consider ThreatExpert which displays detailed information on what a program is doing.