I am having the same issue. I put in the exempt_primary_bind and exempt_ou_1 and still get the same issue. When I try to log into the VPN I never get a DUO push and it looks like it’s never talking to my domain controller.
2018-03-01T22:10:23-0500 ...