1)Yes, but limited to protecting itself
2) Yes, 3.
3) No, but 60-70 for all IPS signatures are web-based anyway and thus we have good coverage for HTTP(S)
While looking at these questions, let's be clear - MWG is not a next gen firewall
Thanks for Clarification