Template? You mean such as the "All allowed" and "All blocked" options in the dropdown menus in the Application Rules? There is currently no way to make a pre-set configuration like that.
Yes, for domain names the Surf Protection is the best place. You should also be able to block specific IP addresses and IP ranges via the global firewall rules, as long as you move the rule above the one to process Application Rules.
Currently we don't have any way in the UI to copy rules, although theoretically you could export your Application Rules, edit them in something like Notepad++, and then import them back into EIS.
That is essentially correct. Please note that if a global firewall rule is below the rule for Application Rules then it won't apply to any applications on your system.