The way it is configured at my location is There is a mailpublising rule set in the DMZ to include Active Sync & OMA within ISA> I installed the Mobileadmin.msi on the exchange server.
The settings on the phone are all standard the main thing was within the server settings only enter servername that is available via initernet eg owaexchangename and all works for this setup.