Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I would run packet-tracer on the ASA, It will tell you if the packet is encrypted. It can still be dropped post encryption if your interesting traffic ACLs don't mirror.https://www.petenetlive.com/KB/Article/0001198
