After you apply Microsoft Skype for Business Server 2015 CU6 (December 2017 Cumulative Update), users are unable to sign in Skype for Business mobile apps over the Internet unless the following cmdlet is run:
Set-CsExternalAccessPolicy -EnableOutsideAccess $True