Our I.T. department is currently in the process of researching a means of checking company email outside the bounds of the corporate network, i.e. web access. Right now we are considering two main ideas, Microsoft Outlook Web/Mobile Access and Citrix Web Interface. The key factor in determining which solution to choose comes down to risk assessment. From the information I have found, both seem like fairly solid and secure systems. Those that have experience with OWA, what concerns, fixes, configuration issues, have you had to address in implementing OWA?