Re: VLAN and Browser detection
1. By SSH or SNMP (It depends the switch vendor ex. Cisco, Hpe etc.). Fortinac is generally support many different switches vendor. Cisco, Aruba is supported and mamy other switch vendors
2. It possible You need add LDAP server at configuration FortiNAC and map you Mareting grup to nac network policy
3. This is debatable. If we use Fortinac agent on the station, we can verify what process is running on the PC / or whether the file ex .exe is in "Programs files" or some registry entry and not allow the host to enter the network. There are many scenarios ....