Cisco knows a thing or two about security and did not require VPNs to access email or company messaging on mobile devices. Presumably those go over TLS anyway.
They did require strong passcodes and a device profile that allowed them to remote wipe lost devices.
They did require strong passcodes and a device profile that allowed them to remote wipe lost devices.