Exchange 2010 + phone security issues

My company runs an Exchange 2010 server accessible only through a Citrix Xenapp environment. Sync access for calendar and mail has been on the drawing board for a couple of years.

However...sync with mail is not wanted as long as there is no possibility to have a separate login on the phone (iOs, Android and Symbian) for mail access, and there should be no caching. No mail should be stored on the phone, only mail when online and logged in. Offline mail reading is not wanted.

Calendar on the other hand has no such restrictions.

Is this possible to configure on the exchange server? No need to be too specific, but something that makes sense when presenting it for the infosec and ICT people?

Have you ever attempted Touchdown? I know this doesn't reply your question but until Google implements genuine exchange support it's the excellent alternative we have. One time you utilize it you will speculate how you ever got by without it.