Exchange ActiveSync (EAS) is Microsoft's excellent protocol that most vendors have adopted as the standard for direct-push email to mobile devices.  Thankfully, Microsoft has dramatically improved the ability to manage deces and restrict access to the Exchange or Office 365 environment in the latest versions.

The following are the various options and settings available, and some implementation details we've put together for clients.