Multiple Fortigate Client VPN Profiles

Hi All,

Please forgive the fairly basic nature of this question!

Our organisation is migrating away from Meraki MX Firewalls and onto Fortigate - probably 80F's or 100F's at this stage. With Meraki, only a single IPSEC VPN profile / subnet can be assigned per device. I have been asked to ensure that the below checklist is possible with Fortigate, I would really appreciate any support you are able to offer!

1. Multiple VPN profiles / subnets - with the ability to assign different security restrictions to the various different VPN user groups / profiles?
2. 2FA / MFA support for client VPN's?
3. The ability to integrate with AD / Radius and authenticate users via their domain credentials

Further to this any comments on whether we should be using client SSL or traditional IPSEC VPN's would also be appreciated - huge thanks in advance! ☺