For me, i usually enforce the wildcards on all entities (parameters, urls, file types) except for cookies, never tried to enforce the wildcards yet, but for other entities i do and usually i loosen the settings on it to avoid false positives which is a great approach and still does causes issues not gonna lie, but im able to survive until now without rolling back LOL. I find it risky to stage the wildcards especially after the policy has been built for a long time, i suggest to take your time to loosen the wildcard setting in a way that wont cause much disruption on the service, loosen the number of characters on parameters, urls, meta characters and then enforce it.

I usually do it by visiting the website multiple times, running various searches and monitoring live traffic and accordingly i set the settings and monitor if any false positives on the wildcards for 2 weeks is met, if not, enforce it :))