so I am testing a new scan of that vpn lan, and having it go every few hours during our business hours, which, in theory should increase the likelihood I scan those assets while they are on at least once or twice a week thanks to @iBoyd.
It is a client-level solution but we have a scheduled task deployed to our VPN-enabled devices that executes a local copy of lspush.exe after a network connection event occurs.