Still seems reasonable for preventing an outside attack though.
(Especially if it's a user who isn't in a corporate environment, where your public IP will probably differ when you connect to different wireless networks. On a corporate network you're more likely to retain the same public IP no matter which room or building you're in.)
If they don't, they should provide an option for corporate administrators to enable IP locking for session cookies.