I'm a junior penetration tester and recently went into the client's office in order to test an internal server of theirs.
They gave me their laptop with Windows installed that is connected to the AD domain and the laptop had VirtualBox installed so I could use a Kali machine for testing.
I wanted a direct connection between me and the server so I set up the machine to be on a bridged connection. Unfortunately, what happened next wasted most of my day:
It seems that the laptop (Windows machine) was no longer connected to any network adapter.
The laptop was blocked by the secure connector (ForeScout) but I asked the guy in charge to release the laptop.
After releasing the blocked laptop, the problem persisted and I didn't have any connection to the network.
Unfortunately, the client is the type of client that has a lot of money to spend on technologies but not so much on how to properly troubleshoot them.
From your experience, what could be the issue?
I think it might be a layer 2 problem (the switch might have blocked the network port) but I think that would be weird because the Kali machine would have a different MAC address and a different IP address. Could it be that the switch detects 2 IP/MAC addresses coming from the same port?
Any recommendation on what would be the best procedure in these cases?
(sadly, VPN connections are not an option for this client)