I'm not 100% clear on how you're communicating with them at the moment - they're all on different sites, and reached via a VPN, and at each site, every tablet has the same, fixed, internal address? Is that right?
So when you communicate with them at the moment, what do you do - it sounds to me as if either
a) you have to connect to the VPN of the specific tablet you want to control or
b) at present the tablets are all connecting to your local port 7890, and receiving their instructions
Are you constantly connected to all the VPNs (which would be a routing nightmare), or are they connecting from behind their firewall to you?
This is one of those things where a network diagram would be helpful