Which of the following would be appropriate when considering inbound access security for a web-based SaaS solution?

Which of the following would be appropriate when considering inbound access security for a web-based SaaS solution?
A. Antivirus/anti-malware
B. IPSec
C. Firewall
D. Obfuscation