Hi,
Is the issue still persists?
In some scenarios, preparing the Schema/AD is required while upgrading from one CU to another on the same Exchange version. For instance, if you are upgrading from Exchange 2016 CU 7 to CU 18, then yes it requires. Please refer the below links for more information,
https://learn.microsoft.com/en-us/exchange/plan-and-deploy/prepare-ad-and-domains?view=exchserver-2016
https://learn.microsoft.com/en-us/exchange/plan-and-deploy/active-directory/ad-schema-changes?view=exchserver-2016
Have you tried accessing it by clearing the cookies and in-private mode?
Internally OWA works and issue is with external - Can you try connecting the same laptop to the internet and access the OWA and check if issue still persists?
Since all users are affected and only external and also you have mentioned recently which means some change might have caused this issue. I would suggest you to check with your network/firewall team and see if there are any blocks for exchange traffic.