Here's a post about how Chrome uses range requests to save bandwidth.
https://lists.w3.org/Archives/Public/ietf-http-wg/2014AprJun/0112.html1. The browser decides whether to use range requests, and it could be that it's NOT big at all, but it makes the download recoverable.
2. For the AVC page, some applications don't have bandwidth controls, so yes, you'll only have monitor and block.
3. Assuming you're talking about Range Requests, there are 2 settings:
a. "Forward range requests" means when the browser asks for part of a file, the WSA will ask the website for part of that file.
b. "Do not forward means" that when the browser asks for part of a file, the WSA will ask the website for the WHOLE FILE.
So, when connections are dropped, modern browsers will ask for only the pieces of a file they need... saving bandwidth.
There are a couple of issues with that though...
1. If the WSA is only getting part of a page, it may not be able to properly detect what web application this transaction is.
2. If the WSA never has the whole file, it can't scan the whole file and block it if its malware.