baseVISION unifies Axpo’s security infrastructure with Microsoft
As Axpo, one of the largest electricity producers in Switzerland and a global leader in energy trading, expectations were high when the company wanted to strengthen its security framework. With activities in over 30 countries and a workforce of 7,000 employees, Axpo’s infrastructure was both extensive and complex.
To further expand their mission for sustainable energy, they needed a scalable migration strategy that would unify their infrastructure while simultaneously enhancing overall endpoint security management. Therefore, they chose baseVISION—a Microsoft Solutions Partner for Security that delivers tailored end-to-end solutions with the Microsoft Security Stack—to support them in developing and implementing their strategy.
Since 2016, the four-time winner of the Microsoft Partner of the Year Awards has been protecting companies from increasingly sophisticated cyber threats – while also helping them to operate securely and confidently in an ever-evolving digital landscape.
A complex infrastructure – and a tight timeframe
Axpo’s goals were ambitious: to unify the endpoint security solution under Microsoft Defender for Endpoint, optimize processes, and achieve centralized management (“Single Pane of Glass”) for all client and server endpoints – to centrally manage EDR policies and alerts, improve detection accuracy, and reduce false positives.
To achieve these goals, Axpo needed to migrate around 2,800 servers from the previous provider to Defender for Endpoint within three months. However, the extensive and diverse infrastructure added additional complexity: 75% of the servers were operated on-premises, 10% were already in Microsoft Azure with Defender for Servers, and the remaining servers were distributed across isolated networks and legacy systems. Additionally, Axpo had:
- A mix of Windows and Linux operating system versions as well as various distributions.
- More than 10 different environments spread across multiple geographic locations.
- Management by various internal teams and external service providers.
- Multiple Active Directory domains.
- A variety of different approaches to system management and configuration.
Despite the complexity, baseVISION was well-prepared to tackle the challenge head-on. “We were confident that our expertise would enable us to effectively support Axpo even within a demanding timeframe,” said Alex Verboon, CTO of baseVISION. “By leveraging our deep understanding of Microsoft Endpoint Management and security technologies, we were able to develop a tailored strategy and execute a seamless migration – significantly enhancing Axpo’s security posture.”
«Thanks to our in-depth understanding of Microsoft Endpoint Management and security technologies, we were able to develop a bespoke strategy and implement a seamless migration.»
End-to-end support for a stronger endpoint solution
Axpo turned to baseVISION due to their extensive expertise in Microsoft Endpoint Management and security solutions. The collaboration began with a thorough planning phase. baseVISION worked closely with Axpo’s teams to gather detailed information about all environments where servers were located – including server hostnames, operating systems, update and patch management processes, and responsibilities for the respective platforms.
Documentation also played a crucial role in the success of the migration. baseVISION carefully recorded the technical prerequisites – including connectivity requirements, supported operating systems, and patch levels – and aligned these details with key stakeholders. This ensured that the migration plan considered Axpo’s specific requirements while minimizing risks.
In parallel, baseVISION developed a Defender Configuration Management Blueprint – a comprehensive guide for onboarding servers to Microsoft Defender for Endpoint. The blueprint detailed the configuration settings for Defender Antivirus and EDR as well as the associated deployment and management processes.
Once the foundations were laid, Axpo and baseVISION moved into the migration planning phase. baseVISION created a migration runbook – a guide that documented the timeline, informed stakeholders, and ensured that all teams worked in alignment.
“The close and competent collaboration with internal stakeholders across national borders and time zones was the cornerstone that made this time-critical endeavor possible in the first place,” said Thomas Oehen, Security Engineer at baseVISION.
Subsequently, baseVISION mastered the complexity of migrating 2,800 servers in record time – strictly according to the plan defined in the runbook. They overcame challenges posed by isolated legacy systems and the combination of on-premises and cloud environments to ensure a smooth transition for Axpo’s diverse infrastructure. Undoubtedly, baseVISION played a crucial role in the successful execution of the migration for Axpo.
«baseVISION war entscheidend für die erfolgreiche Unterstützung in diesem Projekt. Ihre Erfahrung und Expertise ermöglichten es uns, einen klaren Plan zu erstellen und grosse Mengen an Workloads in kurzer Zeit zu bewältigen.»
Strategic alignment and end-to-end modernization
“Ultimately, with the support of baseVISION, we were able to achieve our goal of unifying our server endpoint protection,” said Mark Campbell, who led the initiative at Axpo. “This has led to optimized processes as well as a holistic overview and a unified platform for security monitoring, protection, and prevention.”
The collaboration between Axpo and baseVISION led to impressive results all around.
As part of their long-term Zero Trust strategy, Axpo had already established a strong foundation with the Microsoft E5 Security Suite. Initially, Axpo planned to use Microsoft Defender for Endpoint for clients and a third-party solution for servers. However, they realized they could utilize Microsoft Defender for Cloud for both cloud-native and on-premises workloads – fundamentally transforming the company’s vision for a unified security landscape.
“Microsoft is our central partner for Axpo’s Zero Trust architecture strategy,” added Campbell. “With the introduction of Defender for Cloud as a Cloud Security Posture Management and Cloud Workload Protection platform for Azure-native platform services, we made the strategic decision to also use Defender for Servers P2, which includes XDR capabilities.”
This decision required significantly shortened timelines and intensive coordination for implementation and deployment. “baseVISION was crucial in supporting this project, despite the very tight deadlines and complex special cases,” said Campbell. “Their experience and expertise in the Defender for Endpoint suite enabled us to create a clear plan and handle large volumes of workloads in a short time.”
Axpo’s successful migration was more than just an endpoint security upgrade—it was a testament to the power of strategic alignment and trusted partnerships. With their unified, Microsoft-based security landscape, Axpo is now better equipped to pursue their long-term Zero Trust journey while delivering innovative energy solutions that meet their customers’ evolving needs. And with baseVISION by their side, they’ve built a strong foundation for sustainable growth and security to support them along the way.
This case study was written by Microsoft.
Leading companies rely on us.
