I am currently using lab instances from the Now Learning platform to try out capabilities. I was wondering if the lab traffic is similar/the same as "real world" / "paid" / "non-lab" traffic (for example headers, payload etc.). I have a Palo Alto Networks firewall and our team would like to create custom signatures to identify the various ServiceNow traffic if we decide to implement the various features I'm learning and testing from the Now Learning platform.
Just checking if the work I plan to investigate to create custom signatures using lab traffic can be used if/when we decide to implement the features in a non-lab environment.
