As long as you connect to your server via the BES connection all communications will be encrypted from the device to the BES. In order to connect to the BES the devices will have to be provisioned with a Blackberry Data Plan specifically for BES connnections.
Have a look at this video
or this video
. The BES connection is called BlackBerry MDS or BlackBerry Mobile Data Service.