NAC - create initial endpoint policy

As a start you have to deploy the agent (usually for enterprise networks) like shown in the PA deployment guide. After making sure that the agent can communicate with FNAC, you can create Scans and include it in an Endpoint Compliance Policies. Usually the Scan contains checks related to Antivirus and OS having the latest updates but many other options are available.

This is a use case provided in Fortinet Docs: https://docs.fortinet.com/document/fortinac-f/7.6.0/administration-guide/605737/use-case

You can test something similar for another application or process.

For an initial endpoint policy in FortiNAC, a common and simple policy type used for a basic deployment is typically a posture check policy. This policy would involve checking basic security requirements such as antivirus presence, firewall status, and operating system updates. A sample initial endpoint policy could include criteria like antivirus software installed, firewall enabled, and OS patches up to date. This basic posture check helps ensure that devices connecting to the network meet minimum security standards before being granted access.