The Protect Agent is your best option for laptops that are on off the network or are not on a wired LAN. With the Agent, there is a built-in mechanism to run jobs when a network change are detected to capture agents that on on and off network. You can also enable the option 'Run on boot if schedule missed' for laptops that are powered off at the schedule scan/deployment times. You could also look into the Cloud Agents.
Although we don't recommend non-agent scans against machines through a wireless connections, it should work as long as the connection is solid. Also, VPN connections will cause longer scan times and combining a wireless connections over a VPN is a troubled mix. We have worked with customers that encounter issues with scanning through VPNs. Verify name-IP resolution, attempt to telnet to the target from the Protect service over ports 139/445.
Let me know if you have questions.