> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/5.0/traps-agent-release/known-issues-in-traps-agent-5.0.md). # Known Issues in Traps Agent 5.0 The following table details known issues in Traps agent 5.0 releases. | Issue ID | Description | | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **CPATR-12877** | On Windows endpoints, unknown macros in Microsoft Office documents invoke notifications about these files when their verdict is received. | | **CPATR-12865** | On Windows endpoints, post-detection alerts for Microsoft Office files that contain a macro are not retrievable from the management server. | | **CPATR-10614** | The Traps agent does not create a post-detection event when it receives from WildFire a malware verdict for a macro file that had a previous non-malware verdict. | | **CPATR-9702** |

On endpoints running Windows Embedded POSReady 2009, the Traps agent 5.0.10 sometimes halts when:

The recommended workaround for this issue is:

1. Close the Traps console on the endpoint.

2. Delete the TrapsAgent\_XXX.txt file from C:\Documents and Settings\All Users\Application Data\Cyvera\Everyone\Ipc.

3. Restart CyveraService.exe using Cytool:

1. Cytool runtime stop cyveraservice

2. Cytool runtime start cyveraservice

4. Cytool runtime stop cyveraservice

5. Cytool runtime start cyveraservice

Note

Before you install or upgrade the Traps 5.0.10 agent on an endpoint running Windows Embedded POSReady 2009, see Changes to Default Behavior in Traps Agent 5.0.10

| |

CPA-3352

This issue is now resolved. See Addressed Issues in Traps Agent 5.0.6.

| On endpoints running Windows 10 Insider Preview, the Windows Defender Security Center displays **Virus & threat protection** as `Unknown` and displays `Status unavailable` for Traps even though Traps successfully registers with the Security Center and is available. | |

CPA-2814

This issue is now resolved. See Addressed Issues in Traps Agent 5.0.3.

|

When you install Traps on a Linux endpoint and multiple OpenSSL Red-hat Package Manager (RPM) packages are installed, installation fails.

Workaround: Remove any extra OpenSSL packages from the Linux server.

| |

CPA-2681

This issue is now resolved. See Traps Agent 5.0.1 Addressed Issues.

| Clicking **Check In Now** in the Traps agent console disconnects the agent from the Traps management service after you configure a malware profile with a **Parent Process Name** that exceeds 250 characters (Profiles → Windows → **``**). | |

CPA-1942

This issue is now resolved. See Traps Agent 5.0.1 Addressed Issues.

| When you first install the Traps agent, the Traps management service can take up to one hour to display the associated content and agent version. As a result, the Dashboard can misreport the content version as outdated. | |

CPA-1861

This issue is now resolved. See Addressed Issues in Traps Agent 5.0.4.

| When device details such as username, user domain, and hostname change on an endpoint, the Traps management service can take up to five minutes to display the updated details after the endpoint restarts. | |

CPA-1768

This issue is now resolved. See Addressed Issues in Traps Agent 5.0.4.

| When a remote user logs into a Remote Desktop Server, the Traps does not capture the name of the remote user. As a result, when a security event occurs, the user is identified in logs as undefined. | | **CPA-1278** | When you configure a hash exception for a file that local analysis reported as malware, the Traps agent overrides the WildFire verdict of Unknown with Benign in the local cache instead of waiting for the official WildFire verdict. | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/5.0/traps-agent-release/known-issues-in-traps-agent-5.0.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.