The connection is initiated from our network to the home office. So the IP address of the satellite doesn't really matter.
I'd assume they're restricting access further by only allowing certain ips thru a firewall in front of the VPN server, or requiring extra auth factors from unknown ips, or something.