BES is yet another piece of software to manage if you are a mail administrator, and it is a pretty complex beast at that. You can have just as secure a sync solution with straight iphone/exchange by using Exchange Activesync with a VPN client, and you don't have the overhead of managing a BES install.