Determine if a user is external or internal

I'm not a net work expert, but I'm trying to determine if my network amin is giving me the true facts.  I've asked if it possible to determine if a user is entering our web site from the internet - or from the intranet.  We have users that may VPN in and they are considered internal.  We have some users that can only get to the system from the internet.  Is there a way to look at the Request.ServerVariables["REMOTE_ADDR"] and determine this reliably?
He keeps telling me that ip addresses can change and vpn ips are changeable, and that it would be too much maintenance to use this method... I need to know if I'm getting the full and actual facts on this.  It is my desire to use ip addresses to determine when a user is not vpn or internal on our intranet.
Movie Stars

Solution: Determine if a user is external or internal

Yes you can track whether a user is coming from internet or intranet. There are multiple sites and softwares who can tell you that whether a user is coming from a real / Natted Ip or  local ip. As far as your VPN clients are concern when they logged on to your network then they become a part of your network may be your server is assigning an internal ip but still they are remote users so those sites  also recognize them as external users due to there natted ip.

Hope you have understood what i am trying to say. For your reference google analytics is a service which tracks the visitors. Lots of softwares are also available for this purpose what all you need is just google your issue.