Can I just confirm my thinking that if a user is tunnelling all their traffic down a Cisco VPN through a Vigor 2860 that the VoIP QOS settings here will have no effect? My knowledge of encrypted VPN packets is a little weak, i.e. I don't know whether the ports are still exposed with a VPN encrypted packet or it's within the encryption. I'm going to guess the later.

https://www.dropbox.com/s/ket63o9e7tr43yj/VOIP-1.png?dl=0

Also, in the above configuration, is VoIP QOS actually on even if QoS for WAN1 is currently disabled?

I think I've answered my 2nd question as I've found this report:

https://www.dropbox.com/s/10ktgkt7z7on2s5/VOIP-2.png?dl=0

So I'm guessing here that VOIP traffic is prioritised although it hasn't got dedicated bandwidth.