Q1: MWG has a feature called "Network Protection". You can use this to block certain IP ranges (like VillaA and VillaB) from accessing certain ports (like the proxy port on mwg2). Below is an example of what you would do on MWG2.
Q2: Regarding web reporter, for simplicity sake I'm going to say yes and slowly back away and leave this here Web Reporter: How browse time is calculated https://kc.mcafee.com/corporate/index?page=content&id=KB64344.
For Q1 like you are mentioning to use network protection to block certain IP ranges, the problem is that in Villa A, Villa B the IP number are not in series and there are gaps, it will not work for me, it would be best if I put in group users of Villa A and Villa B in one group and that group requests are not permitted on MWG2 and similarly I put Villa C users in one group and there requests not be processed at MWG1, is this possible ?
For Q2, so you mean to say there is no automatic time out for web browser if there is no user activity and browser is open?
many thanks for your support.