1. The Windows virtual machine was experiencing network connectivity problems.
2. The VM failed to establish ICMP echo requests to both the default gateway and other virtual machines residing within the same Esxi/subnet.
VMware vSphere ESXi 7.0.x
VMware vCenter Server 7.0.x
VMware vCenter Server 6.7.x
VMware vSphere ESXi 6.7.x
VMware vSphere ESXi 8.0.x
Packet capture analysis revealed an absence of transmitted packets (tx) on the virtual network interface card (vNIC) of the virtual machine.
Packet loss was observed prior to reaching the virtual network interface card (vNIC), indicating that packet drops occurred within the guest operating system.
Investigation revealed that the presence of the CrowdStrike Falcon agent on the guest operating system was the root cause of the network connectivity issues. Subsequent removal of the agent resulted in the complete restoration of network functionality for the server.
The Falcon agent acts as a sensor, constantly monitoring the endpoint for any signs of compromise and providing real-time protection against cyber threats.