An implantable medical device (IMD) that includes a transceiver configured to broadcast an advertising data packet that includes a unique identifier, and to receive a scan request data packet from an external device. A memory stores program instructions, and stores an approved device list, and one or more processors are configured to execute the program instructions to identify a device identifier (ID) from the scan request data packet received, apply an advertising filter to determine if the scan request data packet is from an authorized external device based on the device ID and the approved device list, based on the determination by the advertising filter, deny transmission of a scan response data packet from the transceiver when the advertising filter determines that the scan request data packet is from an unauthorized external device, and establish a communication session with an authorized external device independent of the scan request data packet.