Yes this is correct.
Maybe you should check if you’ve chained your appvm’s netqube’s correct.
AppVM Netqube set to Firewall INT → Firewall INT Net Qube → set to VPN2 … etc.
The Firewall INT should boot up automatically when you start the appvm - if they are chained correct.