Companies are missing the point when it comes to endpoint security.