I'm on BES and can't find a VPN option. Probably not enabled by our BES policy.
Posted from my CrackBerry at wapforums.crackberry.com
As far as I am aware when you are on BES (or BPS), maybe Sith can chime in here, is that your device is the on your internal network. I am on BES and I am able to connect to my desktop via RDP and iSeries via telnet with no extra configuration.