Yep, for the firewall OS X has a built-in version of ipfw. Check the sharing preferences pane if you haven't already. It can be extensively customized if you need complex rules.
For AV try Sophos. They provide a free 30-day trial. There's also <a href="http://clamav.net">clamav</a> on the free side.