Sample data stands in for the PAN-OS tokens so the pages render; the files under
deploy/ keep the tokens intact. The portal frames are spliced onto captured PAN-OS
prefixes to show the whole served page — preview only, never importable.
Redirect: On shows the sanctioned-app handoff on a calm category, and its countdown
restarts so the motion stays visible — the served page hands over once and does not
loop. It is shown whatever redirect.enabled says, so what ships still follows the config.
Language offers every translation this data directory ships, whatever languages
lists, and overrides whatever the browser would have negotiated.