A network sanitizer device (201, 401, 501, 502) for isolating a dedicated-function, untrusted device from a sensitive network and for enforcing authorized transmissions on the sensitive network comprising: a. an isolated network interface for connecting to an untrusted device, said isolated network interface being isolated from the sensitive network; b. a sensitive network interface for connecting to the sensitive network; and c. a processor located logically between the isolated network interface and the sensitive network interface adapted to receive data packets from the isolated network interface and configured to: i. intercept every communication originating from the untrusted device; and ii. for every intercepted communication: 1. evaluate the communication at the application layer to ascertain if the communication is an allowed transmission corresponding to a function of the dedicated-function, untrusted device, the communication being an allowed transmission if the communication is on a list of allowed communications: 2. only if the communication is an allowed transmission, generate a recreated communication using an allowed framework satisfying at least in part a purpose of the allowed transmission by re-writing the communication according to a particular safe protocol and safe parameters; and 3. transmit the recreated communication over the sensitive network using the sensitive network interface, wherein the intercepted communication is not, itself, transmitted over the sensitive network. a. an isolated network interface for connecting to an untrusted device, said isolated network interface being isolated from the sensitive network; b. a sensitive network interface for connecting to the sensitive network; and c. a processor located logically between the isolated network interface and the sensitive network interface adapted to receive data packets from the isolated network interface and configured to: i. intercept every communication originating from the untrusted device; and ii. for every intercepted communication: 1. evaluate the communication at the application layer to ascertain if the communication is an allowed transmission corresponding to a function of the dedicated-function, untrusted device, the communication being an allowed transmission if the communication is on a list of allowed communications: 2. only if the communication is an allowed transmission, generate a recreated communication using an allowed framework satisfying at least in part a purpose of the allowed transmission by re-writing the communication according to a particular safe protocol and safe parameters; and 3. transmit the recreated communication over the sensitive network using the sensitive network interface, wherein the intercepted communication is not, itself, transmitted over the sensitive network. i. intercept every communication originating from the untrusted device; and ii. for every intercepted communication: 1. evaluate the communication at the application layer to ascertain if the communication is an allowed transmission corresponding to a function of the dedicated-function, untrusted device, the communication being an allowed transmission if the communication is on a list of allowed communications: 2. only if the communication is an allowed transmission, generate a recreated communication using an allowed framework satisfying at least in part a purpose of the allowed transmission by re-writing the communication according to a particular safe protocol and safe parameters; and 3. transmit the recreated communication over the sensitive network using the sensitive network interface, wherein the intercepted communication is not, itself, transmitted over the sensitive network. 1. evaluate the communication at the application layer to ascertain if the communication is an allowed transmission corresponding to a function of the dedicated-function, untrusted device, the communication being an allowed transmission if the communication is on a list of allowed communications: 2. only if the communication is an allowed transmission, generate a recreated communication using an allowed framework satisfying at least in part a purpose of the allowed transmission by re-writing the communication according to a particular safe protocol and safe parameters; and 3. transmit the recreated communication over the sensitive network using the sensitive network interface, wherein the intercepted communication is not, itself, transmitted over the sensitive network.