The present invention filters access points presented to a user and locks onto an access point and includes an access point filtering unit and an access point locking unit. The access point filtering unit determines the access points that are accessible by a client device and then filters them to present only the access points that are acceptable to under a security policy in force. The access point locking unit has a plurality of operating modes and can lock onto a user selected access point, a security policy prescribed access point, or the access point with the best signal profile. The present invention also includes a method for filtering access points and a method for locking onto an access point that is selected by the user, that has the best signal profile, or that is prescribed by a security policy for a given location.