For use in a wireless network comprising a plurality of base stations, each of said base stations capable of communicating with a plurality of mobile stations, a security device capable of preventing an unprovisioned one of said plurality of mobile stations from, accessing an Internet protocol (IP) data network through said wireless network, said security device comprising:
- a first controller capable of receiving from said unprovisioned mobile station an IP data packet comprising an IP packet header and an IP packet payload and replacing said IP packet header with a replacement IP packet header comprising an IP address of a selected one of a plurality of provisioning servers associated with said wireless network.