VPN works just fine if you use Cisco AnyConnect. Unfortunately Viasat will not pass GRE traffic (GRE utilizes protocol 47, not to be confused with TCP or UDP Port 47). Anyconnect can utilize UDP port 443, which passes just fine through Viasat's service.
I've found though that with the high latency of satellite, if you need to use services like RDP, a cell hotspot may work a bit better than satellite. Unless you are ok with typing and seeing things appear with a 1-2 second delay.
The ASA Cisco series of firewalls can provide the AnyConnect service.