We opened up a case with RIM and they has us modify the config document in the Sametime server to allow trusted connections from our BES server. After that we are all good. I'm still finding bugs with the BlackBerry Manager 4.1, but Sametime is working, so I'm happy
