I have both used Norton and ZoneAlarm firewalls, and I prefer ZoneAlarm - the options are much clearer and easier to access (the Norton one is too "dumbed down").

I haven't got IIS running on this PC, but I'd guess that it will work fine with ZA.