F5 ASM deployment for production traffic in transparent mode.

To add what Amine already commented, You should always consider a balanced approach for positive and negative models. Just allowing signature (negative model) will not help you to shut out all the malicious traffic, so you should also think on the positive model (ASM learns many stuffs) for zero day and all.

Regarding baseline, yes we can have a baseline for all types of application and start from modify the parameters for specific applications. this what exactly we do especially you are dealing with many different types of applications. cheers