McAfee ePO Deep Command

McAfee ePO Deep Command

Reducing the cost of security operations beyond the OS

Next Steps:


McAfee ePO Deep Command provides secure and remote security management access to Intel® vPro™ Active Management Technology (AMT) enabled PCs and fixed-function devices, including Ultrabooks, laptops, intelligent systems, and ATMs that may be powered-off or disabled. Delivering beyond-the-operating system management, ePO Deep Command reduces security operations costs while enhancing your security posture. It enables secure remote access regardless of the endpoint’s power or encrypted state so security administrators can remotely remediate compromised systems, enable energy-saving initiatives, wake systems, and apply proactive security.

By communicating with endpoints at a level beyond the operating system, ePO Deep Command allows security administrators to configure and remediate hard-to-manage endpoints from a central site, using an established and familiar management platform — McAfee ePolicy Orchestrator.

Deploy security ahead of an attack — Switch on the powered-off endpoints to keep them up-to-date by installing the latest security updates, patches, service packs, and other important security tasks. You can even schedule a time to switch on your AMT-enabled systems using the AMT Alarm Clock feature.

Reduce end-user impact — Conduct intensive security tasks during off hours by waking up PCs to run scans without affecting end users' performance.

Reduce power while maintaining control — Decrease power consumption by encouraging and enforcing power-off policies, knowing that those systems are available for remote security control.

Quickly remediate endpoints — Whether the endpoint is local or remote, the administrator can connect to the disabled endpoint via Intel AMT to conduct secure remote remediation.

Features & Benefits

Discover and simplify Intel vPro AMT provisioning

The McAfee ePO Deep Command Discovery and Reporting module helps you to discover Intel vPro AMT-capable endpoints in your environment. Detailed reports ensure you know exactly which endpoints can work with the ePO Deep Command agent.

Wake and execute security

Conduct security maintenance or time-intensive tasks during off hours without impacting productivity. Using the AMT Alarm Clock, security administrators can power on and wake up a PC to execute a defined series of security tasks.

Remotely remediate disabled endpoints

Connect to the disabled endpoint via Intel vPro AMT, whether the endpoint is local or remote, to conduct a remote boot from another boot image on the network.

Get full remote PC control from McAfee ePO

Securely extend the reach of remote remediation with full support of KVM and be able to completely control the remote PC’s keyboard, video, and mouse to greatly simplify remediation capabilities.

Conduct remote encryption management

Wake up encrypted PCs and fixed-function devices with McAfee encryption and conduct security tasks or other updates without the user being involved to authenticate the encryption software. Requires McAfee Endpoint Encryption 7.0 or above.

Maintain security visibility while lowering costs

Wake endpoints, update policies, and return them to lower power states to save energy and pursue industry incentives to cut power consumption without compromising security.

Deploy security ahead of the threat

Protect endpoints ahead of emerging threats. You can update systems before a potential breach and remotely activate countermeasures without impacting productivity.

System Requirements

These are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

  • McAfee ePolicy Orchestrator (McAfee ePO) 4.6 (Discovery and Reporting Module), McAfee ePO 4.6 P6 (McAfee ePO Deep Command), McAfee ePO software 5.0 and above
  • McAfee Agent 4.5 or higher
  • McAfee Endpoint Encryption for PC 7.0 and above (for remote encryption management)
  • Supported OS:
    • Windows 8
    • Windows 7
    • Windows Vista
    • Windows XP
    • Windows 2008
    • Windows Server 2003
    • Windows Embedded XP, 7
  • Intel® vPro™ AMT supported versions: AMT 2.2 and above
  • Intel Setup and Configuration Software (SCS) 8.2 and above

Demos / Tutorials


McAfee ePO Deep Command allows security administrators to configure and remediate hard-to-manage endpoints from a central site, using an established and familiar management platform — McAfee ePolicy Orchestrator.

This in-depth video examines how McAfee ePO Deep Command uses Intel vPro technology to provide security management beyond the OS. See how to deploy security ahead of an attack, remotely remediate endpoints, and wake and patch devices.


Your enterprise attack surface might be bigger than you think, and cybercriminals are constantly finding new ways to exploit any weak points they can find. This video explores the unique, hardware-enhanced security made possible by Intel and McAfee that can help you keep your users and data more secure than ever.


McAfee ePO Deep Command Community Resource Page

The community resource page for McAfee ePO Deep Command offers many technical resources, including announcements on betas, video demonstrations, FAQs, and documentation on product implementation and management.


Data Sheets

McAfee ePolicy Orchestrator

For a technical summary on the McAfee product listed above, please view the product data sheet.

McAfee ePO Deep Command

For a technical summary on the McAfee product listed above, please view the product data sheet.

Solution Briefs

Keep Your Client PCs Safer, Wherever They Go

Learn how hardware-enhanced solutions from Intel and McAfee help you protect and manage remote PCs and data.

McAfee ePO Deep Command & Intel AMT

Use this interactive brief to uncover the powerful use cases that McAfee and Intel help solve with ePO Deep Command and Intel® vPro™

Technology Blueprints

No Sleep for Security

While waking systems to scan and providing remote repair capabilities seem like very different issues, they are both solved through McAfee integration with Intel® vPro® Active Management Technology (Intel AMT). Leveraging the McAfee ePolicy Orchestrator (McAfee ePO) agent and centralized management environment, McAfee ePO Deep Command runs on desktops and laptops with the second generation Intel Core™ i5 and i7 vPro technologies.

White Papers

Protect Your Company’s Data with Efficient Encryption and Secure Remote Management

This paper highlights how integrated hardware-software solutions from Intel and McAfee help you keep remote PCs and data safer with accelerated encryption and secure remote access to PCs powered by Intel Core vPro processors.

Related Products

McAfee Complete Data Protection
McAfee Complete Data Protection delivers powerful data encryption integrated with centralized management that helps prevent unauthorized access and loss or theft of sensitive data. McAfee Complete Data Protection software enables data protection anytime, anywhere with full disk, file, folder, and removable media encryption solutions.

Intel vPro Technology
Intel® vPro™ technology means business. Intel® Core™ vPro™ processors deliver business-class performance in a range of form factors, with built-in security features to help protect your valuable data, user identities, and network access.

Related Solutions
Threats and Risks