In Activesync 4.1 we changed the sync model from a serial type sync to an RNDIS model for synchronisation.  This change whilst very positive for most customers has caused some issues with those companies using Personal Firewalls as the device appears like a network connection talking to your PC.

I've attached a great document that helps resolve those issues as well as gives some great background on the possible security risks enabling this generates.