We have anyconnect users with soft phones. Our ASA is running version 9.6 and Im trying to find out if it even possible to perform quality of service on it. The PBX for the soft phones are on premise so the voice traffic is traversing the outside WAN interface of the ASA. The resource I found seems to indicate it is not a possibility due to encryption and TOS bits not being preserved. Does anyone have a configuration they can share?
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/82310-qos-voip-vpn.html#anc8