1. Allow allways should NOT be a default option. Ppl generally has a habbit of clicking "OK" button moment a popup comes up.
2. A part from "Block Instance", there should be a option to "Block Instance until PC restart" and "Block Instance until logoff" when selected this should not raise further alerts of the same and should automatically Block request.
Note: I do see "block always", "Create rule" options, but they are not visible always. so these options should be available to
all kind of alerts.
3. The information should also display ProcessId and Parent ProcessId tree, so that we can understand from where this is originated. if tree is not possible , then atleast current proessId must be listed, and there should be a button that would allow
user to kill the process, in the cases where we suspect a threat.
4. Sometime alert occurs when machine is left unattended. so security alert messages should close itself, if user do not respond in 10 seconds and assume default action "Deny" / "Block".
Ofcourse the seconds value should be a configurable item somewhere in menu and the event should be log in history.
Regards
PS. Perhaps this could be a quick update instead of waiting for Norton 360 7 release.
[Edit: Masked the IP address information to conform with Participation Guidelines and Terms of Service]