To protect from the ever-growing number of security threats, organizations are look-ing to implement more and more sophisticated security solutions. This is a normal path, since the traditional means of protecting the enterprise, by using firewalls, cannot offer the desired protection level. Tools like intrusion detection systems and intrusion prevention systems are such examples. Another such technology is the Network Behavior Analysis (NBA), which can be implemented as a stand-alone system or included in IDS/IPS or other security tools. The article outlines the NBA technology with its features and limitations and presents the current situation and the possible uses of this technology.