As a result, Duo for Outlook Web Access (OWA) on Exchange 2013 and later, as of We recommend installing Duo on the outermost client access servers. install, Duo for OWA logins "fail closed", blocking OWA access if there is a problem .