Best NAC product for an ICS network?

I have an industrial network (PLCs, RTUs, HMIs).

I'm looking for a way to have some control over what is connected to the network (is this xx brand HMI? Allowed. Is this an authorized laptop? Allowed. Is this a Raspberry Pi? Not allowed)

I'm looking at NAC solutions. Mostly ISE vs Clearpass.

Most of these devices won't have dot1x and would be authorized via MAB. I'm looking for a NAC solution that would be very good at profiling these ICS devices via some device probing/fingerprinting type work. Any suggestions?