Yes (and no, two firewalls at the same time…).

No if you know what you’re doing. AIS does not protect ipv6 but I do not use ipv6.
I do not want redundant protection at firewall level. We really do not need it.

Well… I think get overkilled is not a good idea. And slowness…