Zero Trust principles, such as encryption between services and managing service connections, are essential for maintaining security, even for applications running on virtual machines that are not part of a Kubernetes cluster. Kong Mesh, when deployed outside of Kubernetes, known as Universal, can extend these security measures to all applications. This tutorial explores setting up a global control plane using Kong Konnect, which simplifies managing zone control planes and strengthens network communication security. The process includes deploying Postgres as a persistent database for the zone control plane, configuring a data plane to manage network traffic between services, and deploying services like Redis and WordPress to test the setup. By implementing a data plane proxy, commonly known as a sidecar, and configuring mesh proxies, organizations can achieve resiliency, observability, and security for their services. Enabling mutual TLS (mTLS) further encrypts service communications, aligning with Zero Trust principles. Konnect's Universal Mesh offers a comprehensive service mesh solution for applications running on both virtual machines and Kubernetes, supporting organizations that may not yet have fully transitioned to Kubernetes environments.