On the same endpoint? It is not a good idea. They will crossfire with each other and prevent the device from functioning. Falcon normally disables Defender on the client (not the server) and acts as the primary, but it takes a completely different approach with other AVs…
