Hello - sorry for the delayed reply, and appreciate you taking a look at AppDefense.
The answer is somewhat complex, since it depends on how you've configured AppDefense on your servers. With the product you have the capability to set a response action to events. if you set a Block response to process execution, we would block anything that ran outside your expected set of applications. In this context AV would be mostly useless since malicious software would never have a change to run.
Some customers don't feel comfortable Blocking, however, so they run AppDefense in Alert mode where it acts more like an Intrusion Detection System. In that case we would recommend running alongside AV. The benefit of alert mode is it requires less overhead to manage.
If I understand your comment on vROps, are you saying AppDefense should detect something like a spike in CPU utilization and send that to vROps?