Unfortunately, no. This is a limitation in the way the firewall interacts with the network stack when two or more connections are present. And, yes, in my opinion I'd consider that a design flaw or defect. :-(
You'll need to manually add the exceptions when the second connection is not active.
-steve