Hi Albert,
I would configure a normal VLAN and assign that VLAN to the necessary Ports. Thats all. right? the ISP would work with his own HA setup like HSRP or else I believe.
config steps.
conf t
vlan 10 // for example
name Internet
interface gig 0/1 //for example. The ports you need for ISP and ASA
switch acc vlan 10
There are some more options to secure the port:
for example
no cdp en
spanning-tree bpduguard
..
..
Hope that helps, if yes please rate or let me know what you need additionally.
regards,
Sebatian