In a computer telecommunications network, firewalls protect a machine or network from undesired message transmissions. In the case of a firewall employed on a user side of the wireless link, a message rejected by the firewall has already consumed the wireless resources required to transmit. A system for protecting a mobile wireless user via a firewall employed at the wired line, or ISP side, of the wireless link in a wireless network allows a specific user profile to be provided for each user that is indicative of a desired firewall configuration corresponding to the mobile user. A firewall configuration is established at a firewall application in a wireless transceiver corresponding to the current location of the mobile user, and the same firewall configuration is established, via a wireless handoff, at a second wireless transceiver when the user is located in the area corresponding to the second wireless transceiver, thereby protecting a plurality of wireless users prior to wasteful wireless transmission of undesired messages.