service exposed outside of the vnet meaning?

[bwiseman]

Guacamole Virtual Desktop Service - Is the Guacamole service exposed outside of the vnet?

What does this option actually open up/close off?

[marrobi]

If you wanted to have a guacamole service that's only accessible from inside the VNet. Its the web app endpoint. This is rarely used, but had a use case where users would use a VNet peer to access the workspaces.