Martin is mostly right. Devices just route IC2 communication traffic to its WANs/VPNs according to its outbound policy, static routes, and routes learned from PepPVN peers. “Send all traffic to a PepVPN peer” option also governs.
You may refer to this page for IC2 server IP addresses.