McAfee ePolicy Orchestrator (ePO) Deep Command
Reducing the cost of security operations beyond the OS

Features:

Discover and simplify Intel AMT provisioning
Streamline and reduce effort to discover and provision Intel AMT to allow customers to quickly take advantage of McAfee ePO Deep Command on Intel vPro-based PCs.

Wake and execute security
Conduct security maintenance or time-intensive tasks during off hours without impacting productivity. Using the AMT Alarm Clock, security administrators can power on and wake up a PC to execute a defined series of security tasks.

Remotely remediate disabled endpoints
Connect to the disabled PC via Intel® vPro™ Active Management Technology (AMT), whether the PC is local or remote, to conduct a remote boot from another boot image on the network.

Get full remote PC control from ePO
Securely extend the reach of remote remediation with full support of KVM and be able to completely control the remote PC’s keyboard, video, and mouse to greatly simplify remediation capabilities.

Conduct Remote Encryption Management
Wake up encrypted PCs with McAfee encryption and conduct security tasks or other updates without the user being involved to authenticate the encryption software. Requires McAfee Endpoint Encryption 7.0.

Maintain security visibility while lowering costs
Wake PCs, update policies, and return them to lower power states to save energy and pursue industry incentives to cut power consumption without compromising security.

Deploy security ahead of the threat
Protect endpoints ahead of emerging threats. You can update systems before a potential breach and remotely activate countermeasures without impacting productivity.

Unlock the Power of Intel vPro
Use the McAfee ePO Deep Command Discovery and Reporting module to discover Intel vPro AMT-capable PCs in your environment. Detailed reports ensure you know exactly what PCs you can deploy the ePO Deep Command agent.

Benefits:

Unlock the Power of Intel vPro

McAfee ePO Deep Command software helps you get the value of Intel vPro technology by leveraging the Intel AMT alarm clock, remote wake-up capabilities, and keyboard, video, and mouse (KVM), as well as IDE redirection. First, the McAfee ePO Deep Command Discovery and Reporting Module discovers any AMT-capable PCs in your environment. Detailed reports ensure you know exactly which PCs should receive the McAfee ePO Deep Command agent. McAfee ePO Deep Command software also streamlines provisioning of Intel AMT to simplify the activation of Intel AMT. Once McAfee ePO Deep Command software is installed on provisioned AMT PCs, you are ready to begin remotely managing these PCs beyond the operating system, at the hardware level.

Remote, Out-of-Band Management to the Rescue

Now, security administrators can communicate with and take control of their endpoints at the hardware level whether they are powered-off, disabled, or encrypted. This connection to the hardware allows for remote management for enforcement of security or compliance policy and reduction of security operational costs. In addition to a better security posture, these controls allow adoption of power-management programs to conserve energy while still maintaining access to endpoints. Using Intel vPro AMT technology, McAfee ePO Deep Command software accesses endpoints without relying on the operating system. This hardware-level access enables administrators to power-on systems, execute security tasks, and then return the endpoints to their previous power states. McAfee ePO Deep Command software can even securely initiate the boot process of endpoints running McAfee Endpoint Encryption without the need for user authentication credentials to conduct remote security tasks. These operations can all happen automatically through the alarm clock or on-demand.

By communicating with endpoints at a level beyond the operating system, McAfee ePO Deep Command software allows you to configure and remediate hard-to-manage endpoints from a central site with the familiar management platform of McAfee ePO software.

Wake and Execute

Administrators can now conduct security maintenance or time-intensive tasks during offhours, when users are not disrupted. Using the AMT Alarm Clock, security administrators can power-on and wake up a PC, even if encrypted to execute a security tasks, including, but not limited to:

• Security and configuration updates (including .DATs)
• On-demand scans
• Install additional security products
• Event reporting
• Patching applications or operating system

Out-of-Band Recovery of Disabled Endpoints

When there are problems, such as when an operating system has been disabled or a hard drive has failed, both administrators and users will appreciate the convenience of integrated management activated by McAfee ePO Deep Command software. Whether the PC is local or remote, the administrator can connect to the disabled PC and KVM via AMT to conduct a remote remediation action, such as instructing the PC to boot from another .ISO image on the network.

The Intel AMT “Fast Call for Help” function gives users an easy way to contact McAfee ePO software administrators for help. The McAfee ePO software administrator can quickly:

• Redirect the PC to boot from an image from another location on the network.
• Completely control the local KVM.
• Reset the user’s encryption password.
• Clean and repair infected, disabled, or quarantined systems without hands-on access.

Security Ahead of the Threats

With this broad control, security teams have new options for protecting endpoints ahead of emerging threats. Systems can be updated before a potential threat reaches them, and countermeasures can be activated remotely, preventing any impact on user productivity and keeping data safe.

Lower PC Power Costs

Since McAfee ePO Deep Command software can wake-up PCs, update policies, and then securely return them to their power state, your business can safely embrace energy savings programs and pursue industry incentives to cut power consumption without compromising security. Contact McAfee to see what your power savings could be

Enterprise Scalability and Reporting

McAfee ePO Deep Command software enhances the McAfee ePO software management framework, which is proven to scale to hundreds of thousands of endpoints. Designed to support distributed architectures and security management teams, McAfee ePO software provides a unified security policy management and reporting environment for your entire McAfee security infrastructure. Now, it can take your policies and compliance initiatives beyond the operating system, too. By extending the amount of information you can include in McAfee ePO software dashboards and reports, you can increase your visibility into each endpoint’s compliance as well as the organization’s overall security posture. Correlated data makes audit time easy.

System Requirements:

These are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

• McAfee ePolicy Orchestrator (ePO) 4.6 (Discovery and Reporting Module), ePO 4.6 P6 (McAfee ePO Deep Command), McAfee ePO software 5.0 and above
• McAfee Agent 4.5 or higher
• McAfee Endpoint Encryption for PC 7.0 and above (for Remote Encryption Management)
• Supported OS:
  • Windows 8
  • Windows 7
  • Vista
  • Windows XP
  • Windows 2008
  • Windows Server 2003
• Intel® vPro™ AMT supported versions: AMT 6.1.2 and above
• Intel Setup and Configuration Software (SCS) 8.2 and above

Documentation:

Download the McAfee ePolicy Orchestrator Deep Command Datasheet (PDF).