As long as you connect to your server via the BES connection all communications will be encrypted from the device to the BES. In order to connect to the BES the devices will have to be provisioned with a Blackberry Data Plan specifically for BES connnections.
Have a look at
this video or
this video. The BES connection is called BlackBerry MDS or BlackBerry Mobile Data Service.