Ftp is a prehistoric protocol. It uses 2 different port for commands and data and relies on (dynamic) passive ports also. The file transfer isn't encrypted and the password and username are sent using cleartext. That being said i wouldn't use ftp. sftp (secure ftp) does help with the security part. But it's in basic still an old crappy protocol.
If you still want to setup a ftp server. I'd use filezilla server. Easier to setup/ manage and still free. Also pretty easy to use sftp if you want to. And there are enough tutorials to walk you through setting this up.
However, i'd suggest using something a little newer and more advanced like a ssh server. Usernames and passwords are sent encrypted and the data sent is also encrypted. It doesn't use 2 different ports and also doesn't use passive ports. It does have some downsides though. You can't access it using a normal web browser. You would need something like filezilla client or bitvise tunnelier to access.
For the ssh server you could try freesshd. Or some other ssh server. Or setup a simple linux distribution. Which have much better ssh implementations.