Your setup looks a lot like ours.
I believe if you uncheck both firewall and nat on the internal vApp network than the vApp would not be connected to the VSE which gets deployed with the vApp, and therefor it wouldn't receive DHCP. I could be wrong though.
You might check this by manually assigning a valid IP within the VM OS and see if you can ping the VSE that gets deployed with the vApp.