Small- and medium-sized enterprises are often ignored by security vendors, and contend with unsavvy users a lot.