Which security-enabled device is recommended to provide a site-to-site IPsec VPN solution, but not SSL?

Which security-enabled device is recommended to provide a site-to-site IPsec VPN solution, but not SSL?

A.
Cisco ASA 5500 Series Security Appliance

B.
Cisco WebVPN Services Module

C.
Cisco Integrated Service Routers

D.
Cisco IPsec VPN Module