It means the client is trying to open a secure channel and the combination of endpoint URL it used to connect, along with security policy and security mode used in the request, do not match any of the server's configured endpoints.
It sounds like this MES software's client implementation may be broken in the same way Kepware's is, described here.