SDN is the programmable separation of control and forwarding elements of networking that enables software control of network forwarding that can be logically and/or physically separted form physical switches and routers. The followwing imporant question is considered in this paper:to what extent can SDN-based networks address network security management problems? The new opportunities for enhancing network security brought by this separation are considered it the paper