API Gateway is your Policy enforcement Point(PEP). API Gateway is the place where you define the different security/transformation policies. API Gateway is the tool for the API Providers to define and enforce different policies for their organization needs.
Whereas API Portal is your external world facing developer portal. The main actors of API Portal would be external application developers who would would like to consume the APIs that are published from API Gateway.