I have a dedicated server running win2003,iis6,servu ftp and its own ssl cert installed.

I need to use this machine to securely transfer files to another external business in an encrypted format which is also password protected.

I was considering just setting up a FTP account for them to use on a sub-folder ( not accessible from our sites on the machine ). But I am feeling there is a better way, possibly making use of our SSL cert. but at the same time, very secure.

Not the best with windows 2003 admin yet, but I gotta figure this one out today. Eek.