BIGIP in a network Edge device role

Hi all, I need some assistance if possible. I'm familiar with F5s in a conventional load balancing role inside the corporate network, but we're building a new environment with a pair of 4000-series devices in a configsync pair. I have a DMZ network behind the corporate firewall, bound via LAGs to the 1Gb ports, and a set of internal VLANs bound via LAGs to the 10G ports which will be used for application services, Hypervisor management etc. We'd like to leverage APM to secure all traffic, essentially making them the edge devices for the internal environment.

 

I guess all services are going to be presented via VIPs/Pools/Nodes, but I'm not sure how to set up the basic routes/outgoing traffic rules, default gateways. Has anyone got any guidance or resources on how to configure a BIGIP in this sort of role? I've has a look around but couldn't find anything obvious...

 

Many thanks in advance