It's not quite that simple due to the VPN and proxy configurations we have. Google Hangouts just will not work over a VPN unless it's allowed directly through the firewall, which requires a firewall rule. Typically firewall rules are based on IP addresses and ports. Allowed Google Hangouts (which we want) also has the side effect of allowing Chrome Remote Desktop (which we don't want) directly through the firewall.

"You are doing it wrong" is not an acceptable answer in an enterprise environment unless the vendor is willing to work with their customers to make sure it's possible to actually do it right. But that would mean the vendor would need real customer service...