How are you guys doing jump boxes/bastion hosts?

Do you guys have specialized appliances or just a couple of locked down Linux VM's?