Device Identity over IPSec

Hi All

I've been trying to identify devices over IPSec Tunnels, but have found the "set device-identification enable" command does not exist in 5.2.3 from the CLI  nor the Detect and Identify Devices tick box not on the IPSec Interface. The device type is not found in the "Device Definitions" screen just the MAC address of upstream router. Does anyone know is it possible to do this and if so what do I need to do.

Device Registration works, but I'm looking to apply policies by device type for home workers who never come into the office on different device types.

Thanks