I'm going to assume you know nothing about what IIS is or how to isolate it, IIS (Internet Information Service) is microsfts answer to webhosting, how ever it is a EXTREALY bad answer, it's about as secure a 3 Ton anvil suspended in midair by a bit of string, for example Microsoft's website
http://www.microsoft.com/ is hosted using IIS and guess what, about 1 month ago microsoft's website got hacked, believe me if Microsoft carn't make it secure you don't stand a chance! I recoment you use appache (you can get it from here
http://httpd.apache.org/) for any kind of HTTP hosting (dont worry about cost it's open source, unlike windows and IIS) thus it's free! For FTP hosting I suggest you use Pure FTP
http://www.pureftpd.org/ now because I hope I've convinsed you to use Apache and pure FPT you won't need to isolate it as apache and Pure FTP are secure by default ,how ever they are slightly more complicate to set up then IIS but there is more then info documentation on the Apache and Pure FTP site to learn how they work and how to use them. Hope I Helped, Bye :)