How to restart the SSH service from API

• When hardening Firewall for weak Ciphers as described here, the last step is to restart SSH Service using "set ssh service-restart mgmt"
• If the user forgets to restart the SSH service, or the configuration is pushed by the HA peer or Panorama;  firewall SSH access is lost.
• This article covers restarting the SSH service through API using Web access. 

• Palo Alto Firewalls or Panorama
• Any PAN-OS version
• SSH Service

1. If the Firewall does not have FIPS-CC mode enabled, Use console access to the Firewall and restart the SSH service.
2. If the FIPS-CC mode can't access the console to restart the SSH service, one can use API. 
3. If the API key is not available, Generate the API key using steps at "Get your API Key"
4. Once you have API you can use the following command 

https://IP/api/?key=APIKEY&type=op&cmd=<set><ssh><service-restart><mgmt></mgmt></service-restart></ssh></set>