Ipsec is not the big problem over satellite. Delays in 802.1x processing over 100 milliseconds is. Some clients will not complete a 802.1x exchange that takes over 100 milliseconds to complete, so that becomes the main issue with deploying wireless over satellite...