its because netdefend qos needs to be aware of all the traffic to make qos effective delaying other traffic to give free way to prioritized traffic, voip in your example.
another reason is that qos takes action to prioritize traffic only when pipe or pipes are full, because if not there is no need to action be taken, if all traffic is not pipes netdefend may see the pipes not filled when the reality is that bandwidth its really exhausted an congestion its affecting critical traffic