Hello,
If i understand correctly, have you tried policy "Match Criteria- Source IP Addresses" and apply it only in the production server? If you have to many IP's you can create an IP group.
Or if your non-prod connect through a specific application you can try " Match Criteria - Source Application".
Br,
------------------------------
Sabajete Elezaj
SNT Albania
------------------------------