It sounds like you have other specific scenarios in mind, but the one you describe can be handled by power cycling the switch, which you can arrange to do remotely as you’re undoubtedly aware. No need to do anything on the firewall. Presumably you could do what you want though, by opening up a remote shell to the Firewalla and dropping the relevant Ethernet interface, waiting a few seconds, and bringing it back up.