If your company limits device access to the internet but you have managed Chrome OS devices Google needs to be added to the allowlist.

Information provided in this article applies only if your company uses managed Chrome OS media players that have valid Chrome Enterprise Upgrade licenses.

To ensure that Chrome devices work with TLS inspection or networks restricting external traffic, you need to allow the following hostnames on your proxy server. For details on how to allow hostnames, check with your web filter provider.

See further information on this Google Support article:
​ Set up TLS (or SSL) inspection on Chrome devices