Network sanitization for dedicated communication function and edge enforcement

A network sanitization device for isolating an untrusted device from a sensitive network and for enforcing authorized transmissions on the sensitive network comprising:

• a. an isolated network interface for connecting to the untrusted device, said isolated network interface being isolated from the sensitive network;
• b. a sensitive network interface for connecting to the sensitive network;
• and
• c. a processor located logically between the isolated network interface and the sensitive network interface adapted to receive data packets from the isolated network interface and configured to:
• i. intercept every communication originating from the untrusted device;
• and
• ii. for every intercepted communication:
• 1. evaluate the communication to ascertain if the communication is an allowed transmission or a forbidden transmission by identifying a device function of the untrusted device related to the communication;
• 2. if the communication is an allowed transmission determined by said device function:
• a. generate a recreated communication using an allowed framework satisfying at least in part a purpose of the allowed transmission;
• and
• b. transmit the recreated communication over the sensitive network using the sensitive network interface, wherein the intercepted communication is not, itself, transmitted over the sensitive network;
• 3. if the communication is a forbidden transmission, prevent the communication from being transmitted to the sensitive network.