Need assistance with fixing weak Ciphers via Panorama cli

[Amin2]

Hi 

I wanted to update weak ciphers on a PA-VM using the document below, I wanted to apply the change via Panorama but I don't see the correct config to apply.

I have tried the following:

>set cli config-output-format set

#set template "template name" config vsys vsys1 

Is this the correct format?  I am not sure where I can reference system ssh and the rest of the commands in the document.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PN5bCAG

Any assistance would be appreciated.

Thank you 

-Amin

[S.Cantwell]

These appear to need to be run from the individual firewall's mgmt interfaces and not via a template in Panorama.